search

elastic / ecs-mapper

Translate an ECS mapping CSV to starter pipelines for Beats, Elasticsearch or Logstash
Apache License 2.0
54 stars 12 forks source link

It should be possible to apply format_actions in place (without a destination_field) #16

Closed webmat closed 4 years ago

webmat commented 4 years ago

I think in #8 we lost the ability to apply a format_action to a source_field that's not moving to a different destination_field...

The example/mapping.csv deliberately had two lines like that, the source_fields were successful and process.args. See this diff

tonymeehan commented 4 years ago

Fixed by https://github.com/elastic/ecs-mapper/pull/17