Functionbeat kinesis filter_pattern and elastic id

Hey,

I have set up functionbeat to send events from Amazon Kinesis to our Elasticsearch cluster.

I have two issues that i wondered if anyone could assist with.

  1. I have added a string as a filter_pattern, however it doesn't seem to work and I still just receive all events unfiltered. How does it work i just want to receive events where "eventid" = "1.21.1" for instance. How does the filter pattern work?

  2. Also is it possible to specify using functionbeat which field to use as the elastic id field?

Thanks for your help with this :slight_smile:

Cheers,

Felix

This topic was automatically closed 20 days after the last reply. New replies are no longer allowed.