Hello,
I have a logstash config that goes something like:
input{
pipeline {
address => "output1"
codec => cef{
ecs_compatibility => disabled
}
}
}
output {
stdout {codec => rubydebug}
}
The input in this config is from a json output from another config file which has the CEF string in the "message" key.
However the CEF codec for this config is not working...