diff --git a/x-pack/filebeat/processors/decode_cef/cef/parser.go b/x-pack/filebeat/processors/decode_cef/cef/parser.go
index aab9331f7eb..819e022aa22 100644
--- a/x-pack/filebeat/processors/decode_cef/cef/parser.go
+++ b/x-pack/filebeat/processors/decode_cef/cef/parser.go
@@ -4,7 +4,7 @@
 
 // Code generated by ragel DO NOT EDIT.
 //
-//line cef.rl:1
+// line-disable-directive cef.rl:1
 package cef
 
 import (
@@ -14,7 +14,7 @@ import (
 	"go.uber.org/multierr"
 )
 
-//line parser.go:15
+// line-disable-directive parser.go:15
 var _cef_eof_actions []byte = []byte{
 	0, 0, 0, 0, 0, 0, 0, 0,
 	0, 0, 0, 0, 0, 0, 0, 0,
@@ -32,7 +32,7 @@ const cef_en_gobble_extension int = 33
 const cef_en_main int = 1
 const cef_en_main_cef_extensions int = 29
 
-//line cef.rl:16
+// line-disable-directive cef.rl:16
 
 type cefState struct {
 	key        string           // Extension key.
@@ -54,7 +54,7 @@ func (s *cefState) pushEscape(start, end int) {
 
 // unpack unpacks a CEF message.
 //
-//line parser.rl:17
+// line-disable-directive parser.rl:17
 func (e *Event) unpack(data string) error {
 	cs, p, pe, eof := 0, 0, len(data), len(data)
 	mark, mark_slash := 0, 0
@@ -68,12 +68,12 @@ func (e *Event) unpack(data string) error {
 
 	e.init(data)
 
-//line parser.go:70
+// line-disable-directive parser.go:70
 	{
 		cs = cef_start
 	}
 
-//line parser.go:75
+// line-disable-directive parser.go:75
 	{
 		if (p) == (pe) {
 			goto _test_eof
@@ -978,72 +978,72 @@ func (e *Event) unpack(data string) error {
 		goto f26
 
 	f0:
-//line cef.rl:52
+// line-disable-directive cef.rl:52
 
 		mark = p
 
 		goto _again
 	f4:
-//line cef.rl:55
+// line-disable-directive cef.rl:55
 
 		mark_slash = p
 
 		goto _again
 	f6:
-//line cef.rl:58
+// line-disable-directive cef.rl:58
 
 		state.pushEscape(mark_slash, p)
 
 		goto _again
 	f1:
-//line cef.rl:61
+// line-disable-directive cef.rl:61
 
 		e.Version, _ = strconv.Atoi(data[mark:p])
 
 		goto _again
 	f5:
-//line cef.rl:64
+// line-disable-directive cef.rl:64
 
 		e.DeviceVendor = replaceEscapes(data[mark:p], mark, state.escapes)
 		state.reset()
 
 		goto _again
 	f10:
-//line cef.rl:68
+// line-disable-directive cef.rl:68
 
 		e.DeviceProduct = replaceEscapes(data[mark:p], mark, state.escapes)
 		state.reset()
 
 		goto _again
 	f13:
-//line cef.rl:72
+// line-disable-directive cef.rl:72
 
 		e.DeviceVersion = replaceEscapes(data[mark:p], mark, state.escapes)
 		state.reset()
 
 		goto _again
 	f16:
-//line cef.rl:76
+// line-disable-directive cef.rl:76
 
 		e.DeviceEventClassID = replaceEscapes(data[mark:p], mark, state.escapes)
 		state.reset()
 
 		goto _again
 	f19:
-//line cef.rl:80
+// line-disable-directive cef.rl:80
 
 		e.Name = replaceEscapes(data[mark:p], mark, state.escapes)
 		state.reset()
 
 		goto _again
 	f22:
-//line cef.rl:84
+// line-disable-directive cef.rl:84
 
 		e.Severity = data[mark:p]
 
 		goto _again
 	f23:
-//line cef.rl:87
+// line-disable-directive cef.rl:87
 
 		// A new extension key marks the end of the last extension value.
 		if len(state.key) > 0 && state.valueStart <= mark-1 {
@@ -1054,20 +1054,20 @@ func (e *Event) unpack(data string) error {
 
 		goto _again
 	f29:
-//line cef.rl:95
+// line-disable-directive cef.rl:95
 
 		state.valueStart = p
 		state.valueEnd = p
 
 		goto _again
 	f25:
-//line cef.rl:99
+// line-disable-directive cef.rl:99
 
 		state.valueEnd = p + 1
 
 		goto _again
 	f24:
-//line cef.rl:109
+// line-disable-directive cef.rl:109
 
 		recoveredErrs = append(recoveredErrs, fmt.Errorf("malformed value for %s at pos %d", state.key, p+1))
 		(p)--
@@ -1075,7 +1075,7 @@ func (e *Event) unpack(data string) error {
 
 		goto _again
 	f26:
-//line cef.rl:113
+// line-disable-directive cef.rl:113
 
 		state.reset()
 		// Resume processing at p, the start of the next extension key.
@@ -1084,193 +1084,193 @@ func (e *Event) unpack(data string) error {
 
 		goto _again
 	f2:
-//line cef.rl:52
+// line-disable-directive cef.rl:52
 
 		mark = p
 
-//line cef.rl:55
+// line-disable-directive cef.rl:55
 
 		mark_slash = p
 
 		goto _again
 	f3:
-//line cef.rl:52
+// line-disable-directive cef.rl:52
 
 		mark = p
 
-//line cef.rl:64
+// line-disable-directive cef.rl:64
 
 		e.DeviceVendor = replaceEscapes(data[mark:p], mark, state.escapes)
 		state.reset()
 
 		goto _again
 	f9:
-//line cef.rl:52
+// line-disable-directive cef.rl:52
 
 		mark = p
 
-//line cef.rl:68
+// line-disable-directive cef.rl:68
 
 		e.DeviceProduct = replaceEscapes(data[mark:p], mark, state.escapes)
 		state.reset()
 
 		goto _again
 	f12:
-//line cef.rl:52
+// line-disable-directive cef.rl:52
 
 		mark = p
 
-//line cef.rl:72
+// line-disable-directive cef.rl:72
 
 		e.DeviceVersion = replaceEscapes(data[mark:p], mark, state.escapes)
 		state.reset()
 
 		goto _again
 	f15:
-//line cef.rl:52
+// line-disable-directive cef.rl:52
 
 		mark = p
 
-//line cef.rl:76
+// line-disable-directive cef.rl:76
 
 		e.DeviceEventClassID = replaceEscapes(data[mark:p], mark, state.escapes)
 		state.reset()
 
 		goto _again
 	f18:
-//line cef.rl:52
+// line-disable-directive cef.rl:52
 
 		mark = p
 
-//line cef.rl:80
+// line-disable-directive cef.rl:80
 
 		e.Name = replaceEscapes(data[mark:p], mark, state.escapes)
 		state.reset()
 
 		goto _again
 	f21:
-//line cef.rl:52
+// line-disable-directive cef.rl:52
 
 		mark = p
 
-//line cef.rl:84
+// line-disable-directive cef.rl:84
 
 		e.Severity = data[mark:p]
 
 		goto _again
 	f33:
-//line cef.rl:52
+// line-disable-directive cef.rl:52
 
 		mark = p
 
-//line cef.rl:99
+// line-disable-directive cef.rl:99
 
 		state.valueEnd = p + 1
 
 		goto _again
 	f7:
-//line cef.rl:58
+// line-disable-directive cef.rl:58
 
 		state.pushEscape(mark_slash, p)
 
-//line cef.rl:55
+// line-disable-directive cef.rl:55
 
 		mark_slash = p
 
 		goto _again
 	f8:
-//line cef.rl:58
+// line-disable-directive cef.rl:58
 
 		state.pushEscape(mark_slash, p)
 
-//line cef.rl:64
+// line-disable-directive cef.rl:64
 
 		e.DeviceVendor = replaceEscapes(data[mark:p], mark, state.escapes)
 		state.reset()
 
 		goto _again
 	f11:
-//line cef.rl:58
+// line-disable-directive cef.rl:58
 
 		state.pushEscape(mark_slash, p)
 
-//line cef.rl:68
+// line-disable-directive cef.rl:68
 
 		e.DeviceProduct = replaceEscapes(data[mark:p], mark, state.escapes)
 		state.reset()
 
 		goto _again
 	f14:
-//line cef.rl:58
+// line-disable-directive cef.rl:58
 
 		state.pushEscape(mark_slash, p)
 
-//line cef.rl:72
+// line-disable-directive cef.rl:72
 
 		e.DeviceVersion = replaceEscapes(data[mark:p], mark, state.escapes)
 		state.reset()
 
 		goto _again
 	f17:
-//line cef.rl:58
+// line-disable-directive cef.rl:58
 
 		state.pushEscape(mark_slash, p)
 
-//line cef.rl:76
+// line-disable-directive cef.rl:76
 
 		e.DeviceEventClassID = replaceEscapes(data[mark:p], mark, state.escapes)
 		state.reset()
 
 		goto _again
 	f20:
-//line cef.rl:58
+// line-disable-directive cef.rl:58
 
 		state.pushEscape(mark_slash, p)
 
-//line cef.rl:80
+// line-disable-directive cef.rl:80
 
 		e.Name = replaceEscapes(data[mark:p], mark, state.escapes)
 		state.reset()
 
 		goto _again
 	f35:
-//line cef.rl:58
+// line-disable-directive cef.rl:58
 
 		state.pushEscape(mark_slash, p)
 
-//line cef.rl:99
+// line-disable-directive cef.rl:99
 
 		state.valueEnd = p + 1
 
 		goto _again
 	f30:
-//line cef.rl:95
+// line-disable-directive cef.rl:95
 
 		state.valueStart = p
 		state.valueEnd = p
 
-//line cef.rl:55
+// line-disable-directive cef.rl:55
 
 		mark_slash = p
 
 		goto _again
 	f28:
-//line cef.rl:95
+// line-disable-directive cef.rl:95
 
 		state.valueStart = p
 		state.valueEnd = p
 
-//line cef.rl:99
+// line-disable-directive cef.rl:99
 
 		state.valueEnd = p + 1
 
 		goto _again
 	f32:
-//line cef.rl:99
+// line-disable-directive cef.rl:99
 
 		state.valueEnd = p + 1
 
-//line cef.rl:52
+// line-disable-directive cef.rl:52
 
 		mark = p
 
@@ -1289,7 +1289,7 @@ func (e *Event) unpack(data string) error {
 		if (p) == eof {
 			switch _cef_eof_actions[cs] {
 			case 32:
-//line cef.rl:102
+// line-disable-directive cef.rl:102
 
 				// Reaching the EOF marks the end of the final extension value.
 				if len(state.key) > 0 && state.valueStart <= state.valueEnd {
@@ -1298,18 +1298,18 @@ func (e *Event) unpack(data string) error {
 				}
 
 			case 25:
-//line cef.rl:109
+// line-disable-directive cef.rl:109
 
 				recoveredErrs = append(recoveredErrs, fmt.Errorf("malformed value for %s at pos %d", state.key, p+1))
 				(p)--
 				cs = 33
 
 			case 35:
-//line cef.rl:58
+// line-disable-directive cef.rl:58
 
 				state.pushEscape(mark_slash, p)
 
-//line cef.rl:102
+// line-disable-directive cef.rl:102
 
 				// Reaching the EOF marks the end of the final extension value.
 				if len(state.key) > 0 && state.valueStart <= state.valueEnd {
@@ -1318,12 +1318,12 @@ func (e *Event) unpack(data string) error {
 				}
 
 			case 28:
-//line cef.rl:95
+// line-disable-directive cef.rl:95
 
 				state.valueStart = p
 				state.valueEnd = p
 
-//line cef.rl:102
+// line-disable-directive cef.rl:102
 
 				// Reaching the EOF marks the end of the final extension value.
 				if len(state.key) > 0 && state.valueStart <= state.valueEnd {
@@ -1331,7 +1331,7 @@ func (e *Event) unpack(data string) error {
 					state.reset()
 				}
 
-//line parser.go:1130
+// line-disable-directive parser.go:1130
 			}
 		}
 
@@ -1340,7 +1340,7 @@ func (e *Event) unpack(data string) error {
 		}
 	}
 
-//line cef.rl:175
+// line-disable-directive cef.rl:175
 
 	// Check if state machine completed.
 	if cs < cef_first_final {