Doc: Add tip for checking for existing field#12899
Conversation
Co-authored-by: Sebastian <gentunian@users.noreply.github.com>
|
@gentunian, thank you for sharing this info with the community. I welcome your input on both the content and the attribution. Please let me know if you would like to see any changes. |
|
@karenzone looks good to me. By the way, almost 1.5 years passed since I managed to use that workaround. Did you checked that this still works in current logstash versions? I think it should, as it makes use of simple logic and |
|
Thanks, @gentunian. We will validate as part of the review process. |
kares
left a comment
There was a problem hiding this comment.
looking good, would rather use a consistent field naming convention as suggested
(dashed_lower_case aligns with ECS naming conventions)
Co-authored-by: Karol Bucek <kares@users.noreply.github.com>
karenzone
left a comment
There was a problem hiding this comment.
Builds cleanly and renders as expected
Co-authored-by: Sebastian <gentunian@users.noreply.github.com> Co-authored-by: Karol Bucek <kares@users.noreply.github.com>
Co-authored-by: Sebastian <gentunian@users.noreply.github.com> Co-authored-by: Karol Bucek <kares@users.noreply.github.com>
Backports #12899 Co-authored-by: Sebastian <gentunian@users.noreply.github.com> Co-authored-by: Karol Bucek <kares@users.noreply.github.com>
Backports #12899 Co-authored-by: Sebastian <gentunian@users.noreply.github.com> Co-authored-by: Karol Bucek <kares@users.noreply.github.com>
* master: (41 commits) Test: resolve integration failure due ECS mode (elastic#13044) Feat: event factory support (elastic#13017) Doc: Add geoip database API to node stats (elastic#13019) Add geoip database metrics to /node/stats API (elastic#13004) ecs: on-by-default plus docs (elastic#12830) ispec: fix cross-spec leak from fatal error integration specs (elastic#13002) Fix UBI source URL (elastic#13008) update fpm to allow pkg creation on jdk11+jruby 9.2 (elastic#13005) Add unit test to grant that production aliases correspond to a published RubyGem (elastic#12993) Fix logstash.bat not setting exit code (elastic#12948) Use the OS separator to invoke gradlew from Rake script (elastic#13000) Allow per-pipeline config of ECS Compatibility mode via Central Management (elastic#12861) Update jinja2 dependency in docker build (elastic#12994) fix database manager with multiple pipelines (elastic#12862) Fix Reflections stack traces when process yml files in classpath and debug is enabled (elastic#12991) Fix/log4j routing to avoid create spurious file (elastic#12965) Deps: update JRuby to 9.2.19.0 (elastic#12989) Doc: Add tip for checking for existing field (elastic#12899) Added test to cover the installation of aliased plugins (elastic#12967) CI: Update logstash_release.json after 7.3.12 (elastic#12986) ...
Co-authored-by: Sebastian gentunian@users.noreply.github.com
Release notes
Doc: Add tip for how to see if a boolean field exists
What does this PR do?
Provides a work-around for checking to see if a boolean field exists (long standing issue)
Related issues
Preview
https://logstash_12899.docs-preview.app.elstc.co/guide/en/logstash/master/tips.html#tip-filters