From e7ba4d0da41034fe39458603bb785db3a70b8c48 Mon Sep 17 00:00:00 2001 From: Mariana Dima Date: Wed, 4 Nov 2020 13:34:41 +0000 Subject: [PATCH] Fix for `field [source] not present as part of path [source.ip]` error in azure pipelines (#22377) * mofidy doc * fix pipeline * fix * changelog --- CHANGELOG.next.asciidoc | 1 + x-pack/filebeat/module/azure/activitylogs/ingest/pipeline.yml | 1 + x-pack/filebeat/module/azure/signinlogs/ingest/pipeline.yml | 1 + 3 files changed, 3 insertions(+) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index ef691156598..eed469a7558 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -293,6 +293,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d - Fix incorrect connection state mapping in zeek connection pipeline. {pull}22151[22151] {issue}22149[22149] - Fix handing missing eventtime and assignip field being set to N/A for fortinet module. {pull}22361[22361] - Fix Zeek dashboard reference to `zeek.ssl.server.name` field. {pull}21696[21696] +- Fix for `field [source] not present as part of path [source.ip]` error in azure pipelines. {pull}22377[22377] *Heartbeat* diff --git a/x-pack/filebeat/module/azure/activitylogs/ingest/pipeline.yml b/x-pack/filebeat/module/azure/activitylogs/ingest/pipeline.yml index 2d75cb07241..a7a581db2b2 100644 --- a/x-pack/filebeat/module/azure/activitylogs/ingest/pipeline.yml +++ b/x-pack/filebeat/module/azure/activitylogs/ingest/pipeline.yml @@ -201,6 +201,7 @@ processors: - geoip: field: source.ip target_field: source.geo + ignore_missing: true - geoip: database_file: GeoLite2-ASN.mmdb field: source.ip diff --git a/x-pack/filebeat/module/azure/signinlogs/ingest/pipeline.yml b/x-pack/filebeat/module/azure/signinlogs/ingest/pipeline.yml index 72eb516184b..b156d5346d3 100644 --- a/x-pack/filebeat/module/azure/signinlogs/ingest/pipeline.yml +++ b/x-pack/filebeat/module/azure/signinlogs/ingest/pipeline.yml @@ -280,6 +280,7 @@ processors: - geoip: field: source.ip target_field: source.geo + ignore_missing: true - geoip: database_file: GeoLite2-ASN.mmdb field: source.ip