Pass raw_index through to the ES indexer (#248)

elastic · Feb 16, 2023 · b5bdbfe · b5bdbfe
1 parent 4d8899c
commit b5bdbfe
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/output/elasticsearch/output.go b/output/elasticsearch/output.go
@@ -114,10 +114,17 @@ func (es *ElasticSearchOutput) Start() error {
 					es.logger.Errorf("failed to serialize event: %v", err)
 					continue
 				}
+				var rawIndex string
+				// If the event metadata contains a raw_index field, attach
+				// that to the indexer item to override the global default.
+				if indexField := event.GetMetadata().GetData()["raw_index"]; indexField != nil {
+					rawIndex = indexField.GetStringValue()
+				}
 				err = bi.Add(
 					context.Background(),
 					esutil.BulkIndexerItem{
 						Action: "index",
+						Index:  rawIndex,
 						Body:   bytes.NewReader(serialized),
 						OnSuccess: func(ctx context.Context, item esutil.BulkIndexerItem, res esutil.BulkIndexerResponseItem) {
 							// TODO: update metrics