Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ncm-metaconfig: fixing filebeat schema 7.0 and adding additional processor #1728

Open
DonaldChung-HK opened this issue Nov 7, 2024 · 0 comments · May be fixed by #1810
Open

ncm-metaconfig: fixing filebeat schema 7.0 and adding additional processor #1728

DonaldChung-HK opened this issue Nov 7, 2024 · 0 comments · May be fixed by #1810
Milestone
25.next

Comments

@DonaldChung-HK
Copy link
Contributor

DonaldChung-HK commented Nov 7, 2024 •
edited
Loading

Hi,

I would like to fix/enhance the following:

  • removing the registry_file and prospector from the schema, these are deprecated and will cause filebeat to fail to start tested on 7.10.x.
  • add support for the following processor to support my work.
    • dns for DNS reverse lookup
    • dissect for tokenizing console messages
    • decode_json_fields for tokenizing JSON in the messages.
    • convert processor to change datatype
  • add back docker support from schema_6.3
  • same as ncm-metaconfig beats: schema 6.3 seccomp #1699 the secomp config is needed for Rocky 9
@jrha jrha added this to the 25.next milestone Nov 7, 2024
DonaldChung-HK added a commit to DonaldChung-HK/configuration-modules-core that referenced this issue Jan 30, 2025
@DonaldChung-HK
updated filebeat 7.x schema to fix quattor#1728: remove deprecated ke…
2d52bb1 
…ys; added processors: dns, dissect, decode_json_fields, convert; add docker log support; add secomp config
@DonaldChung-HK DonaldChung-HK linked a pull request Jan 30, 2025 that will close this issue
Open
DonaldChung-HK added a commit to DonaldChung-HK/configuration-modules-core that referenced this issue Jan 31, 2025
@DonaldChung-HK
updated filebeat 7.x schema to fix quattor#1728: remove deprecated ke…
9360bc4 
…ys; added processors: dns, dissect, decode_json_fields, convert; add docker log support; add secomp config
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Milestone
25.next
Development

Successfully merging a pull request may close this issue.

ncm-metaconfig: updated filebeat 7.x schema to fix #1728 DonaldChung-HK/configuration-modules-core
2 participants
@jrha @DonaldChung-HK