Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Beats: fix default_field setting for root fields #1711

Merged
merged 2 commits into from
Jan 11, 2022

Conversation

adriansr
Copy link
Contributor

@adriansr adriansr commented Jan 5, 2022

The generator was adding the default_field setting to non-root fieldsets, causing top-level fields (like message) to be excluded from the default_field index template configuration.

Relates elastic/beats#29633

@adriansr adriansr added bug Something isn't working needs_backport labels Jan 5, 2022
Copy link
Member

@ebeahan ebeahan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The generator was adding the default_field setting to non-root fieldsets, causing top-level fields (like message) to be excluded from the default_field index template configuration.

With these changes, top-level fields, like message, will now have default_field: true explicitly defined if that top-level field is in the allow list?

@adriansr
Copy link
Contributor Author

adriansr commented Jan 7, 2022

With these changes, top-level fields, like message, will now have default_field: true explicitly defined if that top-level field is in the allow list?

Yes, exactly.

The generator was adding the default_field=true setting for non-root
fieldsets, so top-level fields like `message` were missing the flag and
thus not being added to the default_field index template configuration.
Copy link
Member

@ebeahan ebeahan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@adriansr adriansr merged commit 03ea80f into elastic:main Jan 11, 2022
@adriansr adriansr deleted the fix_default_field branch January 11, 2022 09:30
ebeahan pushed a commit to ebeahan/ecs that referenced this pull request Jan 11, 2022
The generator was adding the default_field=true setting for non-root
fieldsets, so top-level fields like `message` were missing the flag and
thus not being added to the default_field index template configuration.
ebeahan pushed a commit to ebeahan/ecs that referenced this pull request Jan 11, 2022
The generator was adding the default_field=true setting for non-root
fieldsets, so top-level fields like `message` were missing the flag and
thus not being added to the default_field index template configuration.
ebeahan added a commit that referenced this pull request Jan 12, 2022
* Beats: fix default_field setting for root fields (#1711)

The generator was adding the default_field=true setting for non-root
fieldsets, so top-level fields like `message` were missing the flag and
thus not being added to the default_field index template configuration.

* move changelog entry into 8.0 section

Co-authored-by: Adrian Serrano <[email protected]>
ebeahan added a commit that referenced this pull request Jan 12, 2022
* Beats: fix default_field setting for root fields (#1711)

The generator was adding the default_field=true setting for non-root
fieldsets, so top-level fields like `message` were missing the flag and
thus not being added to the default_field index template configuration.

* move changelog entry into 8.0 section

Co-authored-by: Adrian Serrano <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants