Add description field and set _id properly

elastic · Feb 10, 2021 · feccf4e · feccf4e
1 parent 07bcd72
commit feccf4e
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 5 deletions.
diff --git a/x-pack/filebeat/module/okta/system/ingest/pipeline.yml b/x-pack/filebeat/module/okta/system/ingest/pipeline.yml
@@ -5,7 +5,7 @@ processors:
       field: event.ingested
       value: "{{_ingest.timestamp}}"
   - script:
-      # drops null/empty values recursively
+      description: Drops null/empty values recursively
       lang: painless
       source: |
         boolean drop(Object o) {
@@ -26,7 +26,7 @@ processors:
       ignore_missing: true
   - convert:
       field: json.uuid
-      target_field: "@metadata._id"
+      target_field: _id
       type: string
       ignore_failure: true
       if: ctx?.json?.uuid != null && ctx?.json?.uuid != ""

diff --git a/x-pack/filebeat/module/okta/system/test/okta-system-test.json.log-expected.json b/x-pack/filebeat/module/okta/system/test/okta-system-test.json.log-expected.json
@@ -1,6 +1,5 @@
 [
     {
-        "@metadata._id": "faf7398a-4f77-11ea-97fb-5925e98228bd",
         "@timestamp": "2020-02-14T22:18:51.843Z",
         "client.geo.city_name": "Dublin",
         "client.geo.country_name": "United States",
@@ -83,7 +82,6 @@
         "user_agent.version": "72.0."
     },
     {
-        "@metadata._id": "3aeede38-4f67-11ea-abd3-1f5d113f2546",
         "@timestamp": "2020-02-14T20:18:57.718Z",
         "client.geo.city_name": "Dublin",
         "client.geo.country_name": "United States",
@@ -167,7 +165,6 @@
         "user_agent.version": "72.0."
     },
     {
-        "@metadata._id": "3af594f9-4f67-11ea-abd3-1f5d113f2546",
         "@timestamp": "2020-02-14T20:18:57.762Z",
         "client.geo.city_name": "Dublin",
         "client.geo.country_name": "United States",