Google Cloud Module - Extracted Fields

Elastic Stack Beats
1

Is the insertId field omitted in filebeat by Google Cloud module while extracting fields? The GCP flow logs have the insertId field in the initial logs, but it doesn't seem to be translated/parsed by the filebeat module.

It will be hard to connect these two the same logs (in Kibana/ES and in GCP) together without an ID.

2

No, is not parsed. Do you mind creating an enhancement request and provide a use case?

3

done! thanks.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.