Got some logstash errors while converting fields to the Elastic Common Schema (ECS). Logstash version: logstash 6.0.0 The goal is to rename a source field into an ecs compliant field e.g [destination][field] echo '{"source":"foo", "destination":"bar"}' | /usr/share/logstash/bin/logstash -e 'input…

In more recent version you get a different error message [ERROR] 2019-01-22 17:40:57.190 [Ruby-0-Thread-4: :1] pipeline - Exception in pipelineworker, the pipeline stopped processing new events, please check your filter configuration and restart Logstash. {:pipeline_id=>"main", "exception"=>"Could …

Discuss the Elastic Stack

Logstash crashes when converting fields to ECS Format

Elastic Stack Logstash

system (system) Closed February 20, 2019, 2:30pm 5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Convert fields to ECS Logstash	8	1850	April 21, 2020
ECS issues Elasticsearch ecs-elastic-common-schema	6	935	May 13, 2022
Unable to parse "message" Logstash	10	826	June 20, 2023
Logstash to ECS Logstash ecs-elastic-common-schema	5	3031	September 10, 2019
Getting mutate_error while trying to use ECS schema Logstash ecs-elastic-common-schema	5	2765	August 8, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash crashes when converting fields to ECS Format

Related topics