Closed
Description
This ticket is created as a followup of #3451
The rename processor (renaming message to event.original) in the ingest pipelines for log datastreams don't have an if/ignore_missing check
Current state:
- rename:
field: message
target_field: event.original
Expected State:
- rename:
field: message
target_field: event.original
ignore_missing: true
if: 'ctx.event?.original == null'
description: 'Renames the originalmessage
field toevent.original
to store a copy of the original message. Theevent.original
field is not touched if the document already has one; it may happen when Logstash sends the document.'
Below are the Observability Integrations which need this change
Phase1 updates:
- apache Add null checks and ignore_missing checks to the rename processor #7845
- apache_tomcat Add null checks and ignore_missing checks to the rename processor #7845
- cassandra Add null checks and ignore_missing checks to the rename processor #7845
- ceph Add null checks and ignore_missing checks to the rename processor #7845
- citrix_adc Add null checks and ignore_missing checks to the rename processor #7845
- golang Add null checks and ignore_missing checks to the rename processor #7845
- hadoop Add null checks and ignore_missing checks to the rename processor #7845
- haproxy Add null checks and ignore_missing checks to the rename processor #7845
- iis Add null checks and ignore_missing checks to the rename processor #7845
- kafka Add null checks and ignore_missing checks to the rename processor #7845
- microsoft_sqlserver Add null checks and ignore_missing checks to the rename processor #7845
- nginx Add null checks and ignore_missing checks to the rename processor #7845
- oracle Add null checks and ignore_missing checks to the rename processor #7845
- oracle_weblogic Add null checks and ignore_missing checks to the rename processor #7845
- php_fpm Add null checks and ignore_missing checks to the rename processor #7845
- postgresql Add null checks and ignore_missing checks to the rename processor #7845
- rabbitmq Add null checks and ignore_missing checks to the rename processor #7845
- redis Add null checks and ignore_missing checks to the rename processor #7845
- traefik Add null checks and ignore_missing checks to the rename processor #7845
- nagios_xi Add null checks and ignore_missing checks to the rename processor #7845
Cloud Monitoring:
- aws [AWS] Add the ignore_missing and null checks to rename processor #7933
- azure_frontdoor [Azure] Update null checks and if checks in the rename processor #7953
- gcp [GCP] Update null checks and if checks in the rename #7934
Cloud Native:
- istio [Cloudnative] Update null checks and if checks in the rename processor #7956
- nats [Cloudnative] Update null checks and if checks in the rename processor #7956
- nginx_ingress_controller [Cloudnative] Update null checks and if checks in the rename processor #7956
- stan [Cloudnative] Update null checks and if checks in the rename processor #7956
Phase2 updates:
- activemq Add null and ignore_missing check to handle event.original field. #8624
- coredns Add null and ignore_missing check to handle event.original field. #8624
- ibmmq Add null and ignore_missing check to handle event.original field. #8624
- mongodb Add null and ignore_missing check to handle event.original field. #8624
- mysql [Mysql] Add support for tags, processors & preserve_original_event #8626
- salesforce Add null and ignore_missing check to handle event.original field. #8624
- spring_boot Add null and ignore_missing check to handle event.original field. #8624
- [ ] tomcatWill soon be deprecated. - vsphere Add null and ignore_missing check to handle event.original field. #8624
Metadata
Metadata
Assignees
Labels
No labels