Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Tag events that come from a filestream with take_over: true #34894

Closed
rdner opened this issue Mar 22, 2023 · 1 comment · Fixed by #39828
Closed

Tag events that come from a filestream with take_over: true #34894

rdner opened this issue Mar 22, 2023 · 1 comment · Fixed by #39828
Assignees
@VihasMakwana
Labels
Filebeat Filebeat good first issue Indicates a good issue for first-time contributors Team:Elastic-Agent-Data-Plane Label for the Agent Data Plane team

Comments

@rdner
Copy link
Member

rdner commented Mar 22, 2023 •
edited
Loading

Describe the enhancement:

We should tag events produced by a filestream that has take_over: true, so it's easier to debug and assist with support.

Describe a specific use case for the enhancement or feature:

We could filter on this tag in Kibana and see the events which came from a filestream in the "take over" mode. So, we know that these events are from the same files the log input(s) was/were previously ingesting.

Suggested by @lucabelluccini
@rdner rdner added Filebeat Filebeat Team:Elastic-Agent-Data-Plane Label for the Agent Data Plane team labels Mar 22, 2023
@rdner rdner self-assigned this Mar 22, 2023
@elasticmachine
Copy link
Collaborator

Pinging @elastic/elastic-agent-data-plane (Team:Elastic-Agent-Data-Plane)

@narph narph mentioned this issue Mar 23, 2023
Closed
@rdner rdner added the good first issue Indicates a good issue for first-time contributors label Jun 5, 2024
@pierrehilbert pierrehilbert assigned VihasMakwana and unassigned rdner Jun 5, 2024
@VihasMakwana VihasMakwana mentioned this issue Jun 7, 2024
Merged
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@VihasMakwana VihasMakwana

Labels
Filebeat Filebeat good first issue Indicates a good issue for first-time contributors Team:Elastic-Agent-Data-Plane Label for the Agent Data Plane team
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

feature: tag events that come from a filestream with take_over: true VihasMakwana/beats
3 participants
@rdner @elasticmachine @VihasMakwana