Hi, in the logstash reference is no cef filter plugin but there is a codec cef which i use for my input. input { stdin { codec => cef } } filter {} output { stdout { codec => rubydebug } } This is working fine but i would need to target a specific field (cef_message). Does anybody know how i can …

I was assuming that pipeline inputs and outputs would respect the codec if the user configured one, but that appears not to be the case. However, it works with a tcp input and output input { generator { count => 1 lines => [ 'Foo' ] } } filter { mutate { add_field => { cefField => "Jan 18 11:07…

Discuss the Elastic Stack

Filter cef

Elastic Stack Logstash

pastechecker (Charlie) May 16, 2019, 1:36pm 4

Is there a way to ingest that data as cef, not as a json? Because from my testing it looks that the pipeline to pipeline communication is only in JSON.

CEF codec plugin

Topic		Replies	Views
CEF codec plugin Logstash	2	555	October 29, 2020
Not getting output with CEF codec Logstash	3	317	January 12, 2023
Logstash cef Logstash	2	306	February 26, 2020
Logstash-filter-cef instead of codec Logstash	1	331	June 19, 2019
How can I generate a CEF output Logstash	2	897	May 29, 2023

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Filter cef

Related topics