Skip to content

Commit 5f33df8

Browse files
[DOCS] Warn LS pipeline should not modify fields coming from EA
Warn LS pipeline should not modify fields coming from EA Modifying data coming from EA can prevent the ingest pipelines on Elasticsearch side associated to the integrations in use in EA to work correctly.
1 parent 815d1d2 commit 5f33df8

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

docs/en/ingest-management/elastic-agent/configuration/outputs/output-logstash.asciidoc

+6
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,12 @@ To receive the events in {ls}, you also need to create a {ls} configuration pipe
3232
The {ls} configuration pipeline listens for incoming {agent} connections,
3333
processes received events, and then sends the events to {es}.
3434

35+
Please be aware the structure of the documents sent from Elastic Agent to {ls} must not be modified by the pipeline.
36+
We recommend the pipeline doesn’t edit or remove the fields and their contents.
37+
Editing the structure of the documents coming from {agent} can prevent the {es} ingest pipelines associated to the integrations
38+
in use to work correctly.
39+
We cannot guarantee that the {es} ingest pipelines associated to the integrations of {agent} can work with missing or modified fields.
40+
3541
The following {ls} pipeline definition example configures a pipeline that listens on port `5044` for
3642
incoming {agent} connections and routes received events to {es}.
3743

0 commit comments

Comments
 (0)