Add a pipeline_append
endpoint to _ingest/pipeline
#49219
Labels
:Data Management/Ingest Node
Execution or management of Ingest Pipelines including GeoIP
Team:Data Management
Meta label for data/management team
Describe the feature: Would like the ability to append a processor/pipeline to existing pipelines and have the appended processor/pipeline persist for any new indices that match an index pattern - IOW the appended processors/pipelines would not get ignored when say, filebeat pushes a new daily index. Changing the location of where modules reside may address this, but a
pipeline_append
endpoint would still be generally useful.One scenario I'm thinking of is to add additional
geoip
enrichment to ECS fields found in incoming Beats data streams. Some of the modules already have ingest pipelines (includinggeoip
processors) and I don't want to override that processing by manually setting theindex.default_pipeline
- I just want to add a few more fields that getgeoip
enriched (so I can create "pew-pew" maps, of course!).The text was updated successfully, but these errors were encountered: