When I use /_ingest/pipeline/user_agent
to create a pipeline as such:
{
"description": "Add user agent information",
"processors": [
{
"user_agent": {
"field": "meta.http.headers.user-agent",
"ignore_missing": true
}
}
]
}
What I really want is to allow the pipeline to process data below:
{
"meta": {
"http.headers.user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 14_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/8.0.2(0x1800022c) NetType/WIFI Language/zh_CN"
}
}
I also tried to create pipeline as below:
{
"description": "Add user agent information",
"processors": [
{
"user_agent": {
"field": "meta.http\\.headers\\.user-agent",
"ignore_missing": true
}
}
]
}
It wouldn't work.
When I have pipeline as such:
{
"description": "Add user agent information",
"processors": [
{
"user_agent": {
"field": "meta.user-agent",
"ignore_missing": true
}
}
]
}
Whilst the data is
{
"meta": {
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 14_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/8.0.2(0x1800022c) NetType/WIFI Language/zh_CN"
}
}
It works.
Unfortunately our architecture has already set-up to produce data like
{
"meta": {
"http.headers.user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 14_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/8.0.2(0x1800022c) NetType/WIFI Language/zh_CN"
}
}
It's pretty much impossible to update all of our apps and services to change the data structure at this point... So is it possible to support
{
"meta": {
"http.headers.user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 14_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/8.0.2(0x1800022c) NetType/WIFI Language/zh_CN"
}
}
and how?