Is it possible to have packetbeat output the full path including the domain name vs just the uri?
Example:
Display www.example.com/getmethispage/ vs. just showing /getmethispage
Is it possible to have packetbeat output the full path including the domain name vs just the uri?
Example:
Display www.example.com/getmethispage/ vs. just showing /getmethispage
Packetbeat doesn't generate any field with the full URL, this could be misleading in some cases depending on the requests done by clients, for example to have a full URL you might also need some parameters, apart of the valid Host
header.
You can find the hostname used in the request in the field http.request_headers.host
, and the full path in the path
field.
Thank you. If I want to collect these header fields would the line look like this in the packetbeat.yml?
send_headers: ["from","host", "code", "link", "server", "x-pingback", "phrase"]
Exactly, that's it, you need to specify the list of headers you want to capture using send_headers
. Also setting send_all_headers
to true
collects all headers.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.