diff --git a/x-pack/filebeat/module/okta/system/ingest/pipeline.yml b/x-pack/filebeat/module/okta/system/ingest/pipeline.yml index 744fe3a1f36..dc576e9c70c 100644 --- a/x-pack/filebeat/module/okta/system/ingest/pipeline.yml +++ b/x-pack/filebeat/module/okta/system/ingest/pipeline.yml @@ -5,7 +5,7 @@ processors: field: event.ingested value: "{{_ingest.timestamp}}" - script: - # drops null/empty values recursively + description: Drops null/empty values recursively lang: painless source: | boolean drop(Object o) { @@ -26,7 +26,7 @@ processors: ignore_missing: true - convert: field: json.uuid - target_field: "@metadata._id" + target_field: _id type: string ignore_failure: true if: ctx?.json?.uuid != null && ctx?.json?.uuid != "" diff --git a/x-pack/filebeat/module/okta/system/test/okta-system-test.json.log-expected.json b/x-pack/filebeat/module/okta/system/test/okta-system-test.json.log-expected.json index d9177444939..226b52efa7d 100644 --- a/x-pack/filebeat/module/okta/system/test/okta-system-test.json.log-expected.json +++ b/x-pack/filebeat/module/okta/system/test/okta-system-test.json.log-expected.json @@ -1,6 +1,5 @@ [ { - "@metadata._id": "faf7398a-4f77-11ea-97fb-5925e98228bd", "@timestamp": "2020-02-14T22:18:51.843Z", "client.geo.city_name": "Dublin", "client.geo.country_name": "United States", @@ -83,7 +82,6 @@ "user_agent.version": "72.0." }, { - "@metadata._id": "3aeede38-4f67-11ea-abd3-1f5d113f2546", "@timestamp": "2020-02-14T20:18:57.718Z", "client.geo.city_name": "Dublin", "client.geo.country_name": "United States", @@ -167,7 +165,6 @@ "user_agent.version": "72.0." }, { - "@metadata._id": "3af594f9-4f67-11ea-abd3-1f5d113f2546", "@timestamp": "2020-02-14T20:18:57.762Z", "client.geo.city_name": "Dublin", "client.geo.country_name": "United States",