From 571422aa6e0333b619f7e421644ed3d111c8c2e5 Mon Sep 17 00:00:00 2001 From: Christoph Wurm Date: Mon, 25 Mar 2019 10:05:43 +0000 Subject: [PATCH] 7.0: Remove IP fields from default_field in Elasticsearch template (#11400) Removes IP fields from the `default_field` array in the generated Elasticsearch template. Further details in the 6.7 PR: https://github.com/elastic/beats/pull/11399 --- CHANGELOG.next.asciidoc | 1 + libbeat/template/processor.go | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 2e5d67604011..7d967cb48729 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -63,6 +63,7 @@ https://github.com/elastic/beats/compare/v7.0.0-beta1...master[Check the HEAD di - Using an environment variable for the password when enrolling a beat will now raise an error if the variable doesn't exist. {pull}10936[10936] - Cancelling enrollment of a beat will not enroll the beat. {issue}10150[10150] - Allow to configure Kafka fetching strategy for the topic metadata. {pull}10682[10682] +- Remove IP fields from default_field in Elasticsearch template. {pull}11400[11400] *Auditbeat* diff --git a/libbeat/template/processor.go b/libbeat/template/processor.go index 4e25bcec03f2..8df4bc2ab505 100644 --- a/libbeat/template/processor.go +++ b/libbeat/template/processor.go @@ -101,7 +101,7 @@ func (p *Processor) Process(fields common.Fields, path string, output common.Map } switch field.Type { - case "", "keyword", "text", "ip": + case "", "keyword", "text": addToDefaultFields(&field) }