From 91569c34a6300362ace635b705de0a0037a0ab54 Mon Sep 17 00:00:00 2001 From: SG Date: Thu, 11 Jan 2024 12:31:04 -0700 Subject: [PATCH] customizing index settings work in progress, idaholab/Malcolm#313 and idaholab/Malcolm#283 --- logstash/pipelines/beats/98_finalize.conf | 4 ++-- logstash/pipelines/enrichment/98_finalize.conf | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/logstash/pipelines/beats/98_finalize.conf b/logstash/pipelines/beats/98_finalize.conf index ed63c35d9..2dc7c5539 100644 --- a/logstash/pipelines/beats/98_finalize.conf +++ b/logstash/pipelines/beats/98_finalize.conf @@ -107,7 +107,7 @@ filter { } } - # resolve opensearch index + # generate opensearch index name if (![@metadata][malcolm_opensearch_index]) { ruby { id => "ruby_resolve_beats_logs_index" @@ -118,7 +118,7 @@ filter { "prefix_default" => "malcolm_beats" "suffix_env" => "MALCOLM_OTHER_INDEX_SUFFIX" "suffix_default" => "-%{%y%m%d}" - "midfix" => [ "[event][module]", "[agent][type]", "[input][type]" ] + "midfix_fields" => [ "[event][module]", "[agent][type]", "[input][type]" ] } } } diff --git a/logstash/pipelines/enrichment/98_finalize.conf b/logstash/pipelines/enrichment/98_finalize.conf index 5ed012abc..5e5176cb2 100644 --- a/logstash/pipelines/enrichment/98_finalize.conf +++ b/logstash/pipelines/enrichment/98_finalize.conf @@ -4,7 +4,7 @@ filter { - # resolve opensearch index + # generate opensearch index name if (![@metadata][malcolm_opensearch_index]) { ruby { id => "ruby_resolve_network_logs_index"