It would be helpful to have an ingest pipeline processor which parses a url to the corresponding ecs fields. It can be done with GROK, but would be much more convenient and error save to have it as an official processor.
What do you think about it?
Regards
Bernhard
Hey Bernhard! The stack-ingest-management tag is for the Ingest Manager feature which is slightly different https://www.elastic.co/guide/en/ingest-management/current/ingest-management-overview.html. Hopefully someone more familiar with Elasticseach ingest node pipelines can answer your question though.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.