Skip to content

Commit

Permalink
[filebeat/netflow]: set event normalisation to true (elastic#38780)
Browse files Browse the repository at this point in the history
* fix(input/netflow): revert event normalisation to true for netflow input

* doc: update CHANGELOG.next.asciidoc

* fix: update fields.asciidoc (unrelated to this work)

* doc: remove irrelevant comment
  • Loading branch information
pkoutsovasilis authored Apr 10, 2024
1 parent 6f4a5d3 commit 2f5ee74
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 3 deletions.
1 change: 1 addition & 0 deletions CHANGELOG.next.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -99,6 +99,7 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff]
- Add missing provider registration and fix published entity for Active Directory entityanalytics provider. {pull}38645[38645]
- Fix handling of un-parsed JSON in O365 module. {issue}37800[37800] {pull}38709[38709]
- Fix filestream's registry GC: registry entries are now removed from the in-memory and disk store when they're older than the set TTL {issue}36761[36761] {pull}38488[38488]
- Fix indexing failures by re-enabling event normalisation in netflow input. {issue}38703[38703] {pull}38780[38780]

*Heartbeat*

Expand Down
4 changes: 1 addition & 3 deletions x-pack/filebeat/input/netflow/input.go
Original file line number Diff line number Diff line change
Expand Up @@ -116,9 +116,7 @@ func (n *netflowInput) Run(ctx v2.Context, connector beat.PipelineConnector) err
client, err := connector.ConnectWith(beat.ClientConfig{
PublishMode: beat.DefaultGuarantees,
Processing: beat.ProcessingConfig{
// This input only produces events with basic types so normalization
// is not required.
EventNormalization: boolPtr(false),
EventNormalization: boolPtr(true),
},
CloseRef: ctx.Cancelation,
EventListener: nil,
Expand Down

0 comments on commit 2f5ee74

Please sign in to comment.