Back to Beats

@metadata is missing in Logstash [metadata-missing]

docs/reference/packetbeat/metadata-missing.md

9.4.0439 B
Original Source

@metadata is missing in Logstash [metadata-missing]

{{ls}} outputs remove @metadata fields automatically. Therefore, if {{ls}} instances are chained directly or via some message queue (for example, Redis or Kafka), the @metadata field will not be available in the final {{ls}} instance.

::::{tip} To preserve @metadata fields, use the {{ls}} mutate filter with the rename setting to rename the fields to non-internal fields. ::::