-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Clarify documentation about indexers and matchers #5566
Comments
I would suggest expanding the scope of the documentation updates to also include:
I'm currently trying to get the add_kubernetes_metadata feature working with our Metricbeat deployment (without any luck yet) and having this type of documentation would be very helpful. At this point I'm having to dig through the beats code to try and understand all of this information which clearly is not the most efficient means for a user to find out how to use a feature. |
Pinging @elastic/infrastructure |
Pinging @elastic/integrations-platforms (Team:Platforms) |
It's 2021 and it's still confusing |
We could clarify
add_kubernetes_metadata
indexers and matchers functionality: https://www.elastic.co/guide/en/beats/filebeat/6.0/add-kubernetes-metadata.htmlIndexers extract pod metadata from kubernetes events and store it in a map in memory
Matchers process beat events and enrich them with metadata from the in-memory map
We should try to avoid indexing related words to avoid confusion with ES indexing, as this is totally unrelated
The text was updated successfully, but these errors were encountered: