Together with my collegue we found a few problems with this codec: The first one is described here -> https://github.com/logstash-plugins/logstash-codec-cef/issues/9 Second one is related with the changes in Elasticsearch 2.0 like: MapperParsingException[Field name [FOO.BAR] cannot contain '.'] D…

Logstash CEF codec

theuntergeek (Aaron Mildenstein) November 4, 2015, 10:15pm 4

Please see: Please read: Upgrading Logstash and Elasticsearch to 2.0

Topic		Replies	Views
Field name cannot contain '.' Logstash	47	42237	July 6, 2017
Use the right codec field "date" Logstash	2	294	July 2, 2020
ArcSight module CEF input parsing (over TCP) [SOLVED] Logstash	1	533	August 8, 2019
Logstash CEF codec and ECS cannot parse 'rt' field throws an error Logstash	3	1304	August 25, 2022
Warning message Logstash	3	305	April 11, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash CEF codec

Related topics