logstash-plugins / logstash-input-syslog

Apache License 2.0
37 stars 38 forks source link

Implement ECS-Compatibility Mode #60

Closed yaauie closed 3 years ago

yaauie commented 4 years ago

This is a stub issue, and needs to be fleshed out with details specific to this plugin.


As a part of the effort to make plugins able to run in an ECS-Compatible manner by default in an upcoming release of Logstash, this plugin needs to either implement an ECS-Compatibility mode or certify that it does not implicitly use fields that conflict with ECS.

Since this plugin embeds a Grok Filter using patterns with capturing subpaterns, implementation may be dependent on ECS-Compatibility in Grok: https://github.com/logstash-plugins/logstash-filter-grok/issues/157