Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Filebeat] List of text fields to be converted #10372

Closed
wants to merge 5 commits into from
Closed

[Filebeat] List of text fields to be converted #10372

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
74fa8e3
[Filebeat] List of text fields to be converted
ruflin Jan 28, 2019
94d27f8
skip some haproxy fields
ruflin Jan 29, 2019
283b963
remove haproxy changes
ruflin Jan 29, 2019
1b8151f
remove kafka changes
ruflin Jan 29, 2019
411f474
remove traefik changes
ruflin Jan 29, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion filebeat/module/elasticsearch/slowlog/_meta/fields.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,14 +10,16 @@
- name: took
description: "Time it took to execute the query"
example: "300ms"
type: text
# Should we extrac that nicer?
type: keyword
ycombinator marked this conversation as resolved.
Show resolved Hide resolved
- name: types
description: "Types"
example: ""
type: keyword
- name: stats
description: "Statistics"
example: ""
# What does this exactly contain, do we need text?
type: text
ycombinator marked this conversation as resolved.
Show resolved Hide resolved
- name: search_type
description: "Search type"
Expand All @@ -26,10 +28,12 @@
- name: source_query
description: "Slow query"
example: "{\"query\":{\"match_all\":{\"boost\":1.0}}}"
# Do we need text?
ycombinator marked this conversation as resolved.
Show resolved Hide resolved
type: text
- name: extra_source
description: "Extra source information"
example: ""
# Do we need text?
type: text
ycombinator marked this conversation as resolved.
Show resolved Hide resolved
- name: total_hits
description: "Total hits"
Expand Down
2 changes: 1 addition & 1 deletion filebeat/module/logstash/log/_meta/fields.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@
description: >
The module or class where the event originate.
- name: thread
type: text
type: keyword
ycombinator marked this conversation as resolved.
Show resolved Hide resolved
description: >
Information about the running thread where the log originate.
- name: log_event
Expand Down
4 changes: 4 additions & 0 deletions filebeat/module/logstash/slowlog/_meta/fields.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@
slowlog
fields:
- name: message
# This should go into log.original? Or is it `message`?
ycombinator marked this conversation as resolved.
Show resolved Hide resolved
type: text
description: >
Contains the un-parsed log message
Expand All @@ -12,10 +13,12 @@
description: >
The module or class where the event originate.
- name: thread
# Keyword?
ycombinator marked this conversation as resolved.
Show resolved Hide resolved
type: text
description: >
Information about the running thread where the log originate.
- name: event
# event.original? or log.original?
ycombinator marked this conversation as resolved.
Show resolved Hide resolved
type: text
description: >
Raw dump of the original event
Expand All @@ -32,6 +35,7 @@
description: >
Execution time for the plugin in milliseconds.
- name: plugin_params
# Keyword?
ycombinator marked this conversation as resolved.
Show resolved Hide resolved
type: text
description: >
String value of the plugin configuration
Expand Down