Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Avoid existing data (if present) in the received json event from being overwritten by added ECS metadata. #164

Open
kxs-who opened this issue Feb 7, 2023 · 0 comments

Comments

@kxs-who
Copy link

kxs-who commented Feb 7, 2023

According to the documentation (https://www.elastic.co/guide/en/logstash/current/plugins-inputs-http.html#plugins-inputs-http-ecs_metadata), the following ECS metadata is populated by the http input plugin:

  • Host IP address
  • Complete HTTP headers
  • HTTP version
  • client user agent
  • host domain and port
  • HTTP method
  • Query path
  • Request content length
  • Request mime type

The following issue was logged because the host field was being overwritten: #61
We would like the http input plugin to have a way to prevent overwriting not just the host metadata but all metadata.

# for free to join this conversation on GitHub. Already have an account? # to comment
Projects
None yet
Development

No branches or pull requests

1 participant