-
Notifications
You must be signed in to change notification settings - Fork 12
Open
Description
Description
elastic_integration
plugin doesn't support set_security_user
, inference
and enrich
so far (not limited to). And when they appear in ingest pipeline definitions, Logstash's execution behavior is slightly different. For example, with set_security_user
processor, Logstash doesn't complain/warn/error and/or even tag the event with _ingest_pipeline_failure
, executes with silence.
However, with rest of processors (inference
and enrich
), Logstash tags the event with _ingest_pipeline_failure
and errors in the logs that processor is not supported.
IMHO, we need to make a same behavior for all unsupported processors or document current behavior for each unsupported processor.
Metadata
Metadata
Assignees
Labels
No labels