elastic / elastic/beats

Beats lowercases Elasticsearch ingest pipeline names

Open
#26,570 10 comments 0 reactions 1 assignee Claimed by @P1llus View on GitHub
bug libbeat Team:Elastic-Agent-Data-Plane
Dominant language
Go
Stars
12.7k
Forks
5k
Avg merge
2d 15m
Merged PRs (30d)
385

Description

Packetbeat version: `packetbeat-7.13.2-amd64.deb`

Hi team,
we are using an Ingest Pipeline for our DGA project.
The name of the pipeline is `ML_DGA_ingest_pipeline`.
We add the name of this pipeline in the config stanza in `packetbeat.yml` like this

```
output.elasticsearch:
hosts: ["your-hostname:your-port"]
pipeline: pipeline ML_DGA_ingest_pipeline
```

When we try to run packetbeat to ingest documents through this pipeline, packetbeat logs report an error `pipeline ml_dga_ingest_pipeline does not exist` - note that the pipeline name has been lowercased.
Note that Elasticsearch itself treats `ML_DGA_ingest_pipeline` and `ml_dga_ingest_pipeline` as two separate entities.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.