Open a03nikki opened 1 year ago
Pinging @elastic/elastic-agent (Team:Elastic-Agent)
@nimarezainia what are your thoughts about this one? Make sense to me but would like your eyes on this.
Do the existingcontains
and range
meet your needs? https://www.elastic.co/guide/en/beats/filebeat/current/defining-processors.html#conditions
Describe the enhancement:
Please add an "any" or "in" processor conditional.
Describe a specific use case for the enhancement or feature:
Currently the processor conditionals for both Agent and Beats have
and
,or
, andequal
. The original set of processors appear to be added by https://github.com/elastic/beats/issues/1447. However, there is not anany
orin
conditional.For example, currently a list of values to check on a processor would be constructed as
and it would be more intuitive and easier to maintain if it could be added similar to this
or
What is the definition of done?
There exists an easier way to provide a list of values to match a particular field against.