Logstash clone filter overwriting user data

Elastic Stack Logstash
1

There is (IMO) a critical bug in the clone filter:

Since it is hard-coded to do:
clone.set("type", type)

It will overwrite whatever was in the original "type" field in the document, causing data corruption/loss.

I've submitted a pull request (https://github.com/logstash-plugins/logstash-filter-clone/pull/12) but doesn't look like anyone has looked into it yet. Can it please be merged / the bug fixed in any other way?

2

Quite disappointing that nobody has bothered to reply, either here or on the GitHub issue. Especially given the potential impact of this bug and the fix that was already provided.

This really leaves me no choice except forking the filter and maintaining my own version of it.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.