hello!
I would like to know if, like an Elasticsearch output, we can use pipeline => "%{[@metadata][pipeline]}" for parsing logs, we could use these predefined pipelines in the pipe type output to parse previously parsed fields through the ingest pipeline
something like..
output {
pipe {
id => "my_plugin_id"
pipeline => "name-of-the-module-pipeline
}
}
---------- other pipeline ----------
input {
pipe {
id => "my_plugin_id"
}
}
filter{
grok ...
}
output {
elasticsearch {
host => xxxxx:9200
index => "%{[some_field][sub_field]}-%{+YYYY.MM.dd}"
}
}
thank you in advanced!