Hello, We are looking at moving from 6.4.2 to 7.x amongst the changes would be moving from our current data model to the Elastic Common Schema (ECS). I understand that the Elastic Ingest Nodes have these extractions 'built-in', but how can I move these regex's and extractions etc etc to a Log Stas…

Move E.C.S. extractions / ingest pipeline to Logstash Pipeline

webmat (Mathieu Martin) November 29, 2019, 3:51pm 4

Indeed. If you'd like to look at them right in the Beats repo, you can check out the comment here for pointers: Logstash to ECS

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.