Some questions about functionalities about cloudwatchlogsbeat HOT 3 CLOSED

Hello!

1. Stream filtering is not supported - this would be a new feature (i.e. requires development). Shouldn't be too hard to add it though - would you be interested in contributing something here?

2. No, logstash is not necessary - the beat can publish directly to elasticsearch (this is standard beat behaviour).

from cloudwatchlogsbeat.

Hi,

Thanks for clarification.

1. Yeah, that would be a nice contribution, I'll try to assimilate the code and needed tests and then a a possible PR;
2. I'd like to have the message fields inserted directly. Eg:

Instead of {"some_cw_metadata-field": "example", "message": "'{"name":"Eliot","surname":"Yaga"}'", I'd like to ingest {"some_cw_metadata-field": "example", "name": "Eliot"} instead>

In this point I'm not sure about the path to take.

Thanks in advance.

from cloudwatchlogsbeat.

Closing due to inactivity - pls reopen if necessary.

from cloudwatchlogsbeat.