Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

filter/clone/documentation optional option "clones" seems not to be optional #1

Open
jordansissel opened this issue May 17, 2015 · 4 comments

Comments

@jordansissel
Copy link
Contributor

(This issue was originally filed by @widhalmt at elastic/logstash#2141)


I treid the clone filter without giving the clones option and was hoping that it would create clones with the same type as the original event. But no clones were created.

clone {
  add_tag => [ "cloned", "icinga_alert" ]
}

Using the following clones are created.

clone {
  add_tag => [ "cloned", "icinga_alert" ]
  clones => [ "clone" ]
}

Maybe I misread the documentation because both configurations get through the configtestof logstash but since the first example doesn't do anything I would have liked at least a hint that it won't do anything.

@jpcarey
Copy link

jpcarey commented Dec 8, 2015

I hate +1s, but +1. I read the doc that no settings were necessary. I setup so all events that existed inside of an if block would have been cloned. This did not work, and I had to go back and setup a separate mutate => add_field => type=X, and then clone => clones => X

@jordansissel
Copy link
Contributor Author

Hmm, Yeah I think y'all are right. We should make clones required, right?

@wiibaa
Copy link
Collaborator

wiibaa commented Dec 10, 2015

@jordansissel so you mean I overdid it in #6 :P

@jordansissel
Copy link
Contributor Author

@wiibaa haha, overdid? Not sure. That looks like a bunch of nice new features. We'll get to reviewing it soon ;P

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants