Skip to content

Commit

Permalink
Add new config options to the decode_json_fields processor docs (#3512)
Browse files Browse the repository at this point in the history
  • Loading branch information
dedemorton authored and ruflin committed Feb 3, 2017

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
1 parent ea12d92 commit 8123910
Showing 2 changed files with 10 additions and 1 deletion.
9 changes: 9 additions & 0 deletions libbeat/docs/processors-config.asciidoc
Original file line number Diff line number Diff line change
@@ -353,6 +353,8 @@ processors:
fields: ["field1", "field2", ...]
process_array: false
max_depth: 1
target:
overwrite_keys: false
-----------------------------------------------------

The `decode_json_fields` processor has the following configuration settings:
@@ -361,6 +363,13 @@ The `decode_json_fields` processor has the following configuration settings:
`process_array`:: (Optional) A boolean that specifies whether to process
arrays. The default is false.
`max_depth`:: (Optional) The maximum parsing depth. The default is 1.
`target`:: (Optional) The field under which the decoded JSON will be written. By
default the decoded JSON object replaces the string field from which it was
read. To merge the decoded JSON fields into the root of the event, specify
`target` with an empty value (`target:`).
`overwrite_keys`:: (Optional) A boolean that specifies whether keys that already
exist in the event are overwritten by keys from the decoded JSON object. The
default value is false.

[[drop-event]]
=== drop_event
2 changes: 1 addition & 1 deletion libbeat/docs/processors.asciidoc
Original file line number Diff line number Diff line change
@@ -6,7 +6,7 @@
//// Use the appropriate variables defined in the index.asciidoc file to
//// resolve Beat names: beatname_uc and beatname_lc.
//// Use the following include to pull this content into a doc file:
//// include::../../libbeat/docs/filtering.asciidoc[]
//// include::../../libbeat/docs/processors.asciidoc[]
//////////////////////////////////////////////////////////////////////////

You can define processors in your configuration to process events before they

0 comments on commit 8123910

Please sign in to comment.