Hi, in the logstash reference is no cef filter plugin but there is a codec cef which i use for my input. input { stdin { codec => cef } } filter {} output { stdout { codec => rubydebug } } This is working fine but i would need to target a specific field (cef_message). Does anybody know how i can …

I was assuming that pipeline inputs and outputs would respect the codec if the user configured one, but that appears not to be the case. However, it works with a tcp input and output input { generator { count => 1 lines => [ 'Foo' ] } } filter { mutate { add_field => { cefField => "Jan 18 11:07…

Discuss the Elastic Stack

Filter cef

Elastic Stack Logstash

pastechecker (Charlie) May 16, 2019, 1:36pm 4

Is there a way to ingest that data as cef, not as a json? Because from my testing it looks that the pipeline to pipeline communication is only in JSON.

CEF codec plugin

Topic		Replies	Views
CEF codec plugin Logstash	2	551	October 29, 2020
Not getting output with CEF codec Logstash	3	313	January 12, 2023
How can I generate a CEF output Logstash	2	876	May 29, 2023
Logstash cycle in ruby filter Logstash	1	189	August 26, 2021
CEF message parsing Logstash	1	336	December 9, 2022

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Filter cef

Related Topics