Skip to content

Commit

Permalink
Fix gcp/vpcflow module defaulting to file input (elastic#24719)
Browse files Browse the repository at this point in the history
The pubsub input was renamed from google-pubsub to gcp-pubsub and the vpcflow filesets manifest
was not updated. As a result it's defaulting to the file input. This fixes the manifest.

The workaround is to explicitly set the input type:

    vpcflow:
      enabled: true
      var.input: gcp-pubsub
  • Loading branch information
andrewkroh authored Mar 24, 2021
1 parent e2257b9 commit 4f91947
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 2 deletions.
3 changes: 2 additions & 1 deletion CHANGELOG.next.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -374,7 +374,8 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
- Fix Cisco ASA parser for message 722051. {pull}24410[24410]
- Fix `google_workspace` pagination. {pull}24668[24668]
- Fix Cisco ASA parser for message 302022. {issue}24405[24405] {pull}24697[24697]
- Fix date parsing in GSuite/login fileset. {issue}24694[24694]
- Fix gcp/vpcflow module error where input type was defaulting to file. {pull}24719[24719]
- Fix date parsing in GSuite/login and Google Workspace/login filesets. {issue}24694[24694]

*Heartbeat*

Expand Down
2 changes: 1 addition & 1 deletion x-pack/filebeat/module/gcp/vpcflow/manifest.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ module_version: "1.0"

var:
- name: input
default: google-pubsub
default: gcp-pubsub
- name: project_id
default: SET_PROJECT_NAME
- name: topic
Expand Down

0 comments on commit 4f91947

Please sign in to comment.