- Updates Elasticsearch Java client used#155
- [DOC] Documents that integrations are designed to work best with data streams and ECS enabled #153
- Fixes handling of array-type event fields by treating them as lists #146
- Syncs with Elasticsearch 8.14, including support for new user-provided GeoIP database types
ConnectionType
,Domain
andIsp
#147
- [DOC] Removes Tech Preview label and adds link to extending integrations topic in LSR #142
- Fixes
EventProcessorBuilder#build
to work with JRuby 9.4.6.0 #133
- Fixes
GeoIpDatabaseProvider.Builder#build
to work with JRuby 9.4.6.0 #132
- Fixes issue where configured
username
/password
credentials was not sent to Elasticsearch instances that had anonymous access enabled #127
- Adds relevant information to Elasticsearch client's User-Agent header #117
- Non-user facing work to shorten JAR path when packaging #114
- [DOC] Additional links and formatting fixes to docs #115
- Synchronize with Elasticsearch 8.12 and include elasticsearch-geo jar to include a missed class #113
- Support non-encoded API Key #101
- Re-syncs with Elasticsearch 8.11 #91
- Adds support for
reroute
processor #100 - Adds support for
geoip
processor to use databases from Logstash's Geoip Database Management service #88 - Restores support for
redact
processor using its x-pack licensed implementation #90
- Re-syncs with Elasticsearch 8.10 #78
- BREAKING: The
redact
processor was removed from upstream IngestCommon, and therefore no longer available here.
- BREAKING: The
- Documentation added for required privileges and unsupported processors #72
- Added request header
Elastic-Api-Version
for serverless #84
- Fixes several related issues with how fields are mapped from the Logstash Event to the IngestDocument and back again #51
IngestDocument
metadata fields are now separately routed to[@metadata][_ingest_document]
on the resultingEvent
, fixing an issue where the presence of Elasticsearch-reserved fields such as the top-level_version
would cause a downstream Elasticsearch output to be unable to index the event #47- Top-level
@timestamp
and@version
fields are no longer excluded from theIngestDocument
, as required by some existing integration pipelines #54 - Field-type conversions have been improved by presenting logstash
Timestamp
-type objects as their ISO8601-encodedString
s mapping any returnedZonedDateTime
-objects into logstashTimestamp
s to support several Ingest Common processors and their typical use in Elastic Integration pipelines #65, #70
- Adds proactive reloaders for both datastream-to-pipeline-name mappings and pipeline definitions to ensure upstream changes are made available without impacting processing #48
- Presents helpful guidance when run on an unsupported version of Java #43
- Fix: now plugin is able to establish a connection to Elasticsearch on Elastic cloud with
cloud_id
andcloud_auth
authentication pair #62 - Adds
pipeline_name
to override the default behaviour of auto-detecting the pipeline name from its data stream #69 - BREAKING: http basic authentication with Elasticsearch is now configured with
username
andpassword
options to make this plugin behave more similarly to other Elasticsearch-related plugins #61 - Improves user-experience when connected to an Elasticsearch that does not have security features enabled (such as when testing against an on-prem cluster) #64
- Provides helpful guidance when providing request credentials to an unsecured Elasticsearch cluster.
- Tolerates anonymous access of an unsecured Elasticsearch cluster by allowing the plugin to start in an "unsafe" mode without pre-validating permission to use the necessary Elasticsearch APIs.