Skip to content

Commit

Permalink
Fix gcp/vpcflow module defaulting to file input (elastic#24719)
Browse files Browse the repository at this point in the history
The pubsub input was renamed from google-pubsub to gcp-pubsub and the vpcflow filesets manifest
was not updated. As a result it's defaulting to the file input. This fixes the manifest.

The workaround is to explicitly set the input type:

    vpcflow:
      enabled: true
      var.input: gcp-pubsub

(cherry picked from commit 4f91947)
  • Loading branch information
andrewkroh committed Mar 24, 2021
1 parent 95b0a30 commit 6b988f1
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 1 deletion.
2 changes: 2 additions & 0 deletions CHANGELOG.next.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -222,6 +222,8 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
- Fix `google_workspace` pagination. {pull}24668[24668]
- Fix netflow module ignoring detect_sequence_reset flag. {issue}24268[24268] {pull}24270[24270]
- Fix Cisco ASA parser for message 302022. {issue}24405[24405] {pull}24697[24697]
- Fix gcp/vpcflow module error where input type was defaulting to file. {pull}24719[24719]
- Fix date parsing in GSuite/login and Google Workspace/login filesets. {issue}24694[24694]

*Heartbeat*

Expand Down
2 changes: 1 addition & 1 deletion x-pack/filebeat/module/gcp/vpcflow/manifest.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ module_version: "1.0"

var:
- name: input
default: google-pubsub
default: gcp-pubsub
- name: project_id
default: SET_PROJECT_NAME
- name: topic
Expand Down

0 comments on commit 6b988f1

Please sign in to comment.