# Warning 'Relying on default value of \`pipeline.ecs\_compatibility' after updating to logstash 7.16.1 **URL:** \ **Category:** Logstash\ **Tags:** docker\ **Created:** [December 15, 2021, 4:42pm UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018 "2021-12-15T16:42:53Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![d71247](https://avatars.discourse-cdn.com/v4/letter/d/47e85d/32.png) [@d71247](https://discuss.elastic.co/u/d71247)\ **Post date:** [December 15, 2021, 4:42pm UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/1 "2021-12-15T16:42:53Z")
Hello, I just updated my Logstash to 7.16.1... but I noticed errors in my conf when starting Logstash.\* the same conf of Logstash works well in version 7.9.1 How do to fix this warning ? Anyone else experienced this? I can't find anything relevant on Google. **[2021-12-15T09:56:00,608][INFO][org.logstash.ackedqueue.QueueUpgrade] No PQ version file found, upgrading to PQ v2.** **[2021-12-15T09:56:00,689][WARN][deprecation.logstash.codecs.json] Relying on default value of `pipeline.ecs_compatibility`, which may change in a future major release of Logstash. To avoid unexpected changes when upgrading Logstash, please explicitly declare your desired ECS Compatibility mode.** **[2021-12-15T09:56:00,770][WARN][deprecation.logstash.filters.clone] Relying on default value of `pipeline.ecs_compatibility`, which may change in a future major release of Logstash. To avoid unexpected changes when upgrading Logstash, please explicitly declare your desired ECS Compatibility mode.** **[2021-12-15T09:56:00,771][WARN][deprecation.logstash.inputs.http] Relying on default value of `pipeline.ecs_compatibility`, which may change in a future major release of Logstash. To avoid unexpected changes when upgrading Logstash, please explicitly declare your desired ECS Compatibility mode.** **[2021-12-15T09:56:00,787][WARN][deprecation.logstash.codecs.plain] Relying on default value of `pipeline.ecs_compatibility`, which may change in a future major release of Logstash. To avoid unexpected changes when upgrading Logstash, please explicitly declare your desired ECS Compatibility mode.** ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [December 15, 2021, 5:30pm UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/2 "2021-12-15T17:30:04Z")
> [@d71247](#): > > How do to fix this warning ? Set the [ecs\_compatibility option](https://www.elastic.co/guide/en/logstash/current/plugins-codecs-json.html#plugins-codecs-json-ecs_compatibility) on the codec so that you explicitly choose the mode rather than relying on a default that will change in a future release. Similarly for the inputs and filters. ---
**Author:** ![yaauie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yaauie/32/23363_2.png) [@yaauie](https://discuss.elastic.co/u/yaauie)\ **Post date:** [December 15, 2021, 8:29pm UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/3 "2021-12-15T20:29:23Z")
When the option isn't specified for an individual plugin, it checks the pipeline-level setting. When the pipeline-level setting is _also_ not specified, you get this warning (not an error). If you want to _lock in_ the current behaviour for _all_ plugins in a pipeline, add `pipeline.ecs_compatibility: disabled` to its definition in your `config/pipelines.yml`. If you want to do so globally, for all pipelines, add `pipeline.ecs_compatibility: disabled` to your `config/logstash.yml`. ---
**Author:** ![d71247](https://avatars.discourse-cdn.com/v4/letter/d/47e85d/32.png) [@d71247](https://discuss.elastic.co/u/d71247)\ **Post date:** [December 15, 2021, 8:35pm UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/4 "2021-12-15T20:35:55Z")
thank you for your answer ... but I noticed another warining :"gauge metric of an unknown type (org.jruby.specialized.RubyArrayOneObject) has been created for key"... knowing that before I did not have this type of alerts on version 7.9.2. I am using a Logstash docker image: 7.16.1 2021-12-15T20:06:53,819][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600, :ssl\_enabled=\>false} [2021-12-15T20:06:57,241][INFO][org.reflections.Reflections] Reflections took 509 ms to scan 1 urls, producing 119 keys and 417 values [2021-12-15T20:07:08,512][INFO][logstash.outputs.Elasticsearch][log\_output] New Elasticsearch output {:class=\>"LogStash::Outputs::Elasticsearch", :hosts=\>["[//localhost:9200](https://localhost:9200)"]} [2021-12-15T20:07:13,258][WARN][org.logstash.instrument.metrics.gauge.LazyDelegatingGauge][log\_kaas] A gauge metric of an unknown type (org.jruby.specialized.RubyArrayOneObject) has been created for key: send\_to. This may result in invalid serialization. It is recommended to log an issue to the responsible developer/development team. [2021-12-15T20:07:13,270][WARN][org.logstash.instrument.metrics.gauge.LazyDelegatingGauge][log\_matchportail] A gauge metric of an unknown type (org.jruby.specialized.RubyArrayOneObject) has been created for key: send\_to. This may result in invalid serialization. It is recommended to log an issue to the responsible developer/development team. [2021-12-15T20:07:13,268][WARN][org.logstash.instrument.metrics.gauge.LazyDelegatingGauge][log\_kaas] A gauge metric of an unknown type (org.jruby.specialized.RubyArrayOneObject) has been created for key: send\_to. This may result in invalid serialization. It is recommended to log an issue to the responsible developer/development team. [2021-12-15T20:07:13,288][WARN][org.logstash.instrument.metrics.gauge.LazyDelegatingGauge][log\_kaas] A gauge metric of an unknown type (org.jruby.specialized.RubyArrayOneObject) has been created for key: send\_to. This may result in invalid serialization. It is recommended to log an issue to the responsible developer/development team. [2021-12-15T20:07:13,289][WARN][org.logstash.instrument.metrics.gauge.LazyDelegatingGauge][log\_kaas] A gauge metric of an unknown type (org.jruby.specialized.RubyArrayOneObject) has been created for key: send\_to. This may result in invalid serialization. It is recommended to log an issue to the responsible developer/development team. [2021-12-15T20:07:13,295][WARN][org.logstash.instrument.metrics.gauge.LazyDelegatingGauge][log\_xray] A gauge metric of an unknown type (org.jruby.specialized.RubyArrayOneObject) has been created for key: send\_to. This may result in invalid serialization. It is recommended to log an issue to the responsible developer/development team. [2021-12-15T20:07:13,297][WARN][org.logstash.instrument.metrics.gauge.LazyDelegatingGauge][log\_xray] A gauge metric of an unknown type (org.jruby.specialized.RubyArrayOneObject) has been created for key: send\_to. This may result in invalid serialization. It is recommended to log an issue to the responsible developer/development team. [2021-12-15T20:07:13,297][WARN][org.logstash.instrument.metrics.gauge.LazyDelegatingGauge][log\_xray] A gauge metric of an unknown type (org.jruby.specialized.RubyArrayOneObject) has been created for key: se ---
**Author:** ![yaauie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yaauie/32/23363_2.png) [@yaauie](https://discuss.elastic.co/u/yaauie)\ **Post date:** [December 16, 2021, 3:24pm UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/5 "2021-12-16T15:24:40Z")
See [Warning [org.logstash.instrument.metrics.gauge.LazyDelegatingGauge] after updating to 7.16.1 - #2 by yaauie](https://discuss.elastic.co/t/warning-org-logstash-instrument-metrics-gauge-lazydelegatinggauge-after-updating-to-7-16-1/292049/2) ---
**Author:** ![Yuval\_Yogev](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yuval_yogev/32/99546_2.png) [@Yuval\_Yogev](https://discuss.elastic.co/u/Yuval_Yogev)\ **Post date:** [December 26, 2021, 12:05pm UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/6 "2021-12-26T12:05:51Z")
Hi @yaauie , I've set pipeline.ecs\_compatibility: disabled in my config/logstash.yml file, which made some of the warning go away, however, I still see warnings coming from codecs (json, plain): ```auto [2021-12-26T11:20:47,500][WARN][deprecation.logstash.codecs.plain] Relying on default value of `pipeline.ecs_compatibility`, which may change in a future major release of Logstash. To avoid unexpected changes when upgrading Logstash, please explicitly declare your desired ECS Compatibility mode. [2021-12-26T11:20:47,505][WARN][deprecation.logstash.codecs.json] Relying on default value of `pipeline.ecs_compatibility`, which may change in a future major release of Logstash. To avoid unexpected changes when upgrading Logstash, please explicitly declare your desired ECS Compatibility mode. ``` ---
**Author:** ![yaauie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yaauie/32/23363_2.png) [@yaauie](https://discuss.elastic.co/u/yaauie)\ **Post date:** [December 26, 2021, 3:37pm UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/7 "2021-12-26T15:37:45Z")
I would be glad to help you chase that down. What does your pipeline definition look like (especially your input and output sections, since that is where codecs live), and specifically what versions of Logstash (`bin/logstash --version`) and what versions of the plugins are you running (`bin/logstash-plugin list --verbose`)? It is possible that one or more plugins instantiates its own codec outside of the normal flow. ---
**Author:** ![Rahul\_Dey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rahul_dey/32/89444_2.png) [@Rahul\_Dey](https://discuss.elastic.co/u/Rahul_Dey)\ **Post date:** [December 27, 2021, 3:45am UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/8 "2021-12-27T03:45:12Z")
Hi @yaauie , I have also recently upgraded to 7.16.1 from version 7.4.2 and initially I was getting this error. ```auto "status"=>400, "error"=>{"type"=>"mapper_parsing_exception", "reason"=>"object mapping for [host] tried to parse field [host] as object, but found a concrete value"} ``` Then I renamed the host field in filter plugin like this. ```auto mutate { rename => { "host" => "[host][name]" } } ``` And then I was getting this. ```auto [WARN][deprecation.logstash.codecs.jsonlines][vasapi_stream][c11de3d22d41883d169599d7dbe4237718d4bdb77409a8fec4f02c1c5d71d1cc] Relying on default value of `pipeline.ecs_compatibility`, which may change in a future major release of Logstash. To avoid unexpected changes when upgrading Logstash, please explicitly declare your desired ECS Compatibility mode. ``` I have set property "pipeline.ecs\_compatibility: disabled" in logstash.yml file which makes the warning go away but the logstash pipeline is stuck as I cannot see any new logs after these following lines. Usually the ecs warnings used to come after these lines. ```auto bidos-logstash_1 | [2021-12-27T02:58:49,492][INFO][logstash.javapipeline][.monitoring-logstash] Pipeline started {"pipeline.id"=>".monitoring-logstash"} bidos-logstash_1 | [2021-12-27T02:58:49,665][INFO][logstash.javapipeline][vasapi_stream] Pipeline Java execution initialization time {"seconds"=>0.75} bidos-logstash_1 | [2021-12-27T02:58:49,838][INFO][logstash.javapipeline][vasapi_stream] Pipeline started {"pipeline.id"=>"vasapi_stream"} bidos-logstash_1 | [2021-12-27T02:58:49,858][INFO][logstash.inputs.tcp][vasapi_stream][b14eb8d9e41a7b7c6a22f1d12a127fca5d104a428505d67aee0732dd3d544c42] Starting tcp input listener {:address=>"0.0.0.0:5959", :ssl_enable=>false} bidos-logstash_1 | [2021-12-27T02:58:49,957][INFO][logstash.agent] Pipelines running {:count=>2, :running_pipelines=>[:".monitoring-logstash", :vasapi_stream], :non_running_pipelines=>[]} ``` Can you please help, my entire logstash pipeline conf looks like below. ```auto input { tcp { port => "${VASAPI_TCP_PORT}" codec => json_lines } } filter{ if ![applicationid]{ drop{}} # extract duration of finished tasks grok{ match => {"message" => "Finished task %{GREEDYDATA} in %{INT:task_duration_ms:int} ms%{GREEDYDATA}"} } mutate { rename => { "host" => "[host][name]" } } } output{ elasticsearch { hosts => ["${ELASTICSEARCH_HOST}:${ELASTICSEARCH_PORT}"] data_stream => "true" data_stream_type => "logs" data_stream_dataset => "${VASAPI_STREAM_INDEX}" data_stream_namespace => "default" action => "create" user => "${ELASTICSEARCH_INSERT_USERNAME}" password => "${ELASTICSEARCH_INSERT_PASSWORD}" ssl => "true" ssl_certificate_verification => "true" cacert => "${LOGSTASH_BASE}/certificates/BOSCH-CA-DE_pem.cer" } } ``` ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [December 27, 2021, 4:08am UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/9 "2021-12-27T04:08:18Z")
Does this add anything to the other thread about this [here](https://discuss.elastic.co/t/logstash-not-writing-data-to-elasticsearch-data-streams/292541)? ---
**Author:** ![Rahul\_Dey](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rahul_dey/32/89444_2.png) [@Rahul\_Dey](https://discuss.elastic.co/u/Rahul_Dey)\ **Post date:** [December 27, 2021, 6:40am UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/10 "2021-12-27T06:40:21Z")
Hi @Badger, one extra detail, after doing the below changes in Input plugin. ```auto input { tcp { port => "${VASAPI_TCP_PORT}" ecs_compatibility => v1 codec => json_lines { ecs_compatibility => v1 } } } ``` I am getting this messages repeatedly and logstash is not writing any data to data streams. ```auto [INFO][logstash.codecs.jsonlines][vasapi_stream] ECS compatibility is enabled but `target` option was not specified. This may cause fields to be set at the top-level of the event where they are likely to clash with the Elastic Common Schema. It is recommended to set the `target` option to avoid potential schema conflicts (if your data is ECS compliant or non-conflicting, feel free to ignore this message) ``` ---
**Author:** ![Yuval\_Yogev](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yuval_yogev/32/99546_2.png) [@Yuval\_Yogev](https://discuss.elastic.co/u/Yuval_Yogev)\ **Post date:** [December 30, 2021, 3:43pm UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/11 "2021-12-30T15:43:12Z")
@yaauie It seems many people are expiriencing this issue with different codecs, and this log is very large in quantity. Do you think there is a way to solve this? ---
**Author:** ![yaauie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yaauie/32/23363_2.png) [@yaauie](https://discuss.elastic.co/u/yaauie)\ **Post date:** [December 30, 2021, 4:36pm UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/12 "2021-12-30T16:36:07Z")
> expiriencing this issue @Yuval_Yogev what issue, exactly? When a relevant plugin is instantiated with `ecs_compatibility` specified, or its pipeline's `pipeline.ecs_compatibility` is specified (either for the pipeline's entry in `pipelines.yml` or globally in the `logstash.yml`?), the deprecation warning is not logged. The deprecation warning lets you know that the default value is going to change in a future release of Logstash, and is only emitted on a plugin that is relying on the default. If this is not the case, then we need details about _which_ codecs under _which_ inputs/outputs it is occurring in. We need specifics about _how_ Logstash is being configured if the above doesn't hold true. ---
**Author:** ![chferng](https://avatars.discourse-cdn.com/v4/letter/c/45deac/32.png) [@chferng](https://discuss.elastic.co/u/chferng)\ **Post date:** [January 9, 2022, 5:42pm UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/13 "2022-01-09T17:42:06Z")
I am also experiencing the same issue of large volume of ECS compatibility deprecation messages with my current setup of Logstash 7.16.1 using the docker image from Bitnami. ```auto input { beats { port => 5044 ecs_compatibility => "v8" ssl => true ssl_certificate_authorities => ["[ca_cert_location]/logstashRootCA.cert.pem"] ssl_certificate => "[k8s_secret_location]/tls.crt" ssl_key => "[k8s_secret_location]/tls.key" ssl_verify_mode => "none" tls_min_version => 1.2 tags => ["beats"] } tcp { port => 5054 ecs_compatibility => "v8" codec => json { ecs_compatibility => "v8" } ssl_enable => true ssl_certificate_authorities => ["[ca_cert_location]/logstashRootCA.cert.pem"] ssl_cert => "[k8s_secret_location]/tls.crt" ssl_key => "[k8s_secret_location]/tls.key" ssl_verify => false tags => ["kong-tcp"] } } ``` The above is the content of the logstash.conf deployed as a configmap. Prior to setting the compatibility to v8, I have tried configuring them as "disabled" but no matter which value I tried, both will generate the deprecation message. I have not modified the logstash.yml that comes with the image and am wondering if it is causing the issue with the settings on the plugin level. ---
**Author:** ![chferng](https://avatars.discourse-cdn.com/v4/letter/c/45deac/32.png) [@chferng](https://discuss.elastic.co/u/chferng)\ **Post date:** [January 20, 2022, 2:02am UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/14 "2022-01-20T02:02:45Z")
@yaauie For my setup, Logstash is version 7.16.1 and the Beats and TCP input plugin version are 6.2.3. Following is the latest logstash.conf which still generates the excessive deprecation warning logs. I am assuming, by setting the compatibility at the plugin level, this should override the settings in pipelines.yml or logstash.yml, is that right? ```auto input { beats { port => 5044 ecs_compatibility => disabled ssl => true ssl_certificate_authorities => ["//logstashRootCA.cert.pem"] ssl_certificate => "//tls.crt" ssl_key => "//logstashServer-pkcs8.key" ssl_verify_mode => "full" tls_min_version => 1.2 tags => ["beats"] } tcp { port => 5054 ecs_compatibility => disabled codec => json { ecs_compatibility => disabled } ssl_enable => true ssl_certificate_authorities => ["//logstashRootCA.cert.pem"] ssl_cert => "//tls.crt" ssl_key => "//tls.key" ssl_verify => false tags => ["tcp"] } } filter { } output { if "beats" in [tags] { azure_loganalytics { customer_id => "${LOG_ANALYTICS_CUST_ID}" shared_key => "${LOG_ANALYTICS_KEY}" log_type => "uatonpremapplog" ecs_compatibility => disabled } } else if "tcp" in [tags] { azure_loganalytics { customer_id => "${LOG_ANALYTICS_CUST_ID}" shared_key => "${LOG_ANALYTICS_KEY}" log_type => "uatapilog" ecs_compatibility => disabled } } } ``` ---
**Author:** ![yaauie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yaauie/32/23363_2.png) [@yaauie](https://discuss.elastic.co/u/yaauie)\ **Post date:** [January 20, 2022, 2:44am UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/15 "2022-01-20T02:44:26Z")
Have you tried setting the `pipeline.ecs_compatibility: disabled` for the entire pipeline? If so, are you still getting the deprecation warnings? I'll have to look into it, but I believe the problem may be with the beats input, which has a codec but doesn't use it, or possibly with another pipeline, or other confs running in the same pipeline. Are you running multiple pipelines (e.g., `pipelines.yml` or Kibana's Central Management for Logstash), or do you have Monitoring enabled? ---
**Author:** ![chferng](https://avatars.discourse-cdn.com/v4/letter/c/45deac/32.png) [@chferng](https://discuss.elastic.co/u/chferng)\ **Post date:** [January 20, 2022, 4:01am UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/16 "2022-01-20T04:01:15Z")
No, I have not tried setting it for the whole pipeline, as I am using the default pipeline and logstash.yml from Bitnami. However, I have tried setting the environment variable PIPELINE\_ECS\_COMPATIBILITY in the values YAML file for the Helm deployment, and that did not solve the issue as well. I will need to look into Bitnami's base image for the other pieces of information. I believe that, the last time I checked, there is only one pipeline and ecs\_compatibility is not configured in logstash.yml ---
**Author:** ![chferng](https://avatars.discourse-cdn.com/v4/letter/c/45deac/32.png) [@chferng](https://discuss.elastic.co/u/chferng)\ **Post date:** [February 8, 2022, 2:16am UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/17 "2022-02-08T02:16:54Z")
@yaauie May I ask if you have any findings with the beats input codec? Currently, my setup does not run multiple pipelines and have tried setting the environment variable in the Helms values YAML file but to no avail. ---
**Author:** ![yaauie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yaauie/32/23363_2.png) [@yaauie](https://discuss.elastic.co/u/yaauie)\ **Post date:** [February 8, 2022, 6:52am UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/18 "2022-02-08T06:52:03Z")
Using Logstash 7.17.0 and 8.0.0, I am seeing that the default plain codec inside the beats input _correctly_ is able to retrieve the value of `ecs_compatibility` from the pipeline's settings, and only emits this deprecation warning when the setting is _not_ provided in _any_ of the following - in the codec's definition (`codec => plain { ecs_compatibility => disabled }`) - in the pipelines.yml, - in the logstash.yml, - via command-line flag (`--pipeline.ecs_compatibility=v8`, which effectively sets the global value as if it were provided in the `logstash.yml`). I see that the [`env2yaml.go` from 7.17.0](https://github.com/elastic/logstash/blob/v7.17.0/docker/data/logstash/env2yaml/env2yaml.go#L64) also correctly defines the `pipeline.ecs_compatibility` setting, so the docker bridge _should_ handle the environment variable `PIPELINE_ECS_COMPATIBILITY=disabled`. ---
**Author:** ![yaauie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yaauie/32/23363_2.png) [@yaauie](https://discuss.elastic.co/u/yaauie)\ **Post date:** [February 8, 2022, 6:58am UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/19 "2022-02-08T06:58:08Z")
> [@chferng](#): > > Helms Can you provide the relevant section of your helm values yaml? If you're using the [Elastic helm charts](https://github.com/elastic/helm-charts) as a base, you should likely be using the [`logstashConfig`/`logstash.yml` key to provide a logstash yaml](https://github.com/elastic/helm-charts/blob/main/logstash/examples/security/values.yaml#L31) instead of routing through the docker environment variable bridge. ---
**Author:** ![chferng](https://avatars.discourse-cdn.com/v4/letter/c/45deac/32.png) [@chferng](https://discuss.elastic.co/u/chferng)\ **Post date:** [February 14, 2022, 3:21pm UTC](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018/20 "2022-02-14T15:21:12Z")
My apologies for the late reply. We are using Logstash 7.16.3 image and the Helm chart from Bitnami. Regarding the plain codec for Beats input, if I have already have the codec =\> json configured, will adding the codec =\> plain be causing any issue? Unfortunately, I am not familiar with configuring the pipelines.yml/logstash.yml files in the Helm files nor with building them into the image. [Next page](https://discuss.elastic.co/t/warning-relying-on-default-value-of-pipeline-ecs-compatibility-after-updating-to-logstash-7-16-1/292018.md?page=2)