From 571422aa6e0333b619f7e421644ed3d111c8c2e5 Mon Sep 17 00:00:00 2001 From: Christoph Wurm Date: Mon, 25 Mar 2019 10:05:43 +0000 Subject: [PATCH] 7.0: Remove IP fields from default_field in Elasticsearch template (#11400) Removes IP fields from the `default_field` array in the generated Elasticsearch template. Further details in the 6.7 PR: https://github.com/elastic/beats/pull/11399 --- CHANGELOG.next.asciidoc | 1 + libbeat/template/processor.go | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 2e5d6760401..7d967cb4872 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -63,6 +63,7 @@ https://github.com/elastic/beats/compare/v7.0.0-beta1...master[Check the HEAD di - Using an environment variable for the password when enrolling a beat will now raise an error if the variable doesn't exist. {pull}10936[10936] - Cancelling enrollment of a beat will not enroll the beat. {issue}10150[10150] - Allow to configure Kafka fetching strategy for the topic metadata. {pull}10682[10682] +- Remove IP fields from default_field in Elasticsearch template. {pull}11400[11400] *Auditbeat* diff --git a/libbeat/template/processor.go b/libbeat/template/processor.go index 4e25bcec03f..8df4bc2ab50 100644 --- a/libbeat/template/processor.go +++ b/libbeat/template/processor.go @@ -101,7 +101,7 @@ func (p *Processor) Process(fields common.Fields, path string, output common.Map } switch field.Type { - case "", "keyword", "text", "ip": + case "", "keyword", "text": addToDefaultFields(&field) }