From e6d492bdfb5e0dca8672828071b12e10c4429f8f Mon Sep 17 00:00:00 2001 From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com> Date: Fri, 24 Nov 2023 14:24:07 +0000 Subject: [PATCH] remove references to mutate filter (#12084) (#12105) (cherry picked from commit 8b0f906e21c7090aa265d3bbbdc56ddc2087068c) Co-authored-by: Colleen McGinnis --- docs/configure/outputs/logstash.asciidoc | 60 +----------------------- 1 file changed, 1 insertion(+), 59 deletions(-) diff --git a/docs/configure/outputs/logstash.asciidoc b/docs/configure/outputs/logstash.asciidoc index e81df687143..59290980cd8 100644 --- a/docs/configure/outputs/logstash.asciidoc +++ b/docs/configure/outputs/logstash.asciidoc @@ -54,7 +54,7 @@ include::../../shared-kibana-endpoint.asciidoc[tag=shared-kibana-config] === {ls} configuration pipeline Finally, you must create a {ls} configuration pipeline that listens for incoming -APM Server connections, dedots the `data_stream.*` fields, and indexes received events into {es}. +APM Server connections and indexes received events into {es}. . Use the {logstash-ref}/plugins-inputs-elastic_agent.html[Elastic Agent input plugin] to configure {ls} to receive events from the APM Server. A minimal `input` config might look like this: @@ -68,54 +68,6 @@ input { } ---- -. Use the {logstash-ref}/plugins-filters-mutate.html[Mutate filter plugin] to set up <>. -Because the {ls} {es} output doesn't understand dotted field notation, you must use this filter to -dedot the default `data_stream.*` fields sent from APM Server to {ls}. -+ -[source,conf] ----- -filter { - mutate { - rename => { - "[data_stream.type]" => "[data_stream][type]" - "[data_stream.dataset]" => "[data_stream][dataset]" - "[data_stream.namespace]" => "[data_stream][namespace]" - } - } -} ----- -+ -.Expand to learn more -[%collapsible] -==== -**** -APM Server sends data stream information to {ls} in the following format: - -[source,json] ----- -{ - "data_stream.dataset": "apm", - "data_stream.type": "traces", - "data_stream.namespace": "default" -} ----- - -{es} expects to receive data stream information in the following format: - -[source,json] ----- -"data_stream" { - "dataset": "apm", - "type": "traces", - "dataset": "default" -} ----- - -The mutation defined above transforms what APM Server sends to {ls} into a data format that {es} understands. -This allows you to automatically route APM data to the appropriate data streams. -**** -==== - . Use the {logstash-ref}/plugins-outputs-elasticsearch.html[{es} output plugin] to send events to {es} for indexing. A minimal `output` config might look like this: + @@ -142,16 +94,6 @@ input { } } -filter { - mutate { - rename => { - "[data_stream.type]" => "[data_stream][type]" - "[data_stream.dataset]" => "[data_stream][dataset]" - "[data_stream.namespace]" => "[data_stream][namespace]" - } - } -} - output { elasticsearch { data_stream => "true"