From 57ffbe3ac91cecfdb4ee7df7bb4d535a373293e5 Mon Sep 17 00:00:00 2001 From: "Lee E. Hinman" Date: Mon, 21 Sep 2020 19:07:17 -0500 Subject: [PATCH] Add acceptable event log keys to winlog when running filebeat under elasti-agent 'id', 'meta' and 'revision' are sent as config keys to the winlog input type. This change allows those config keys to pass validation. --- winlogbeat/eventlog/factory.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/winlogbeat/eventlog/factory.go b/winlogbeat/eventlog/factory.go index 965ddbdac10..f66c158b2f2 100644 --- a/winlogbeat/eventlog/factory.go +++ b/winlogbeat/eventlog/factory.go @@ -28,7 +28,7 @@ import ( ) var commonConfigKeys = []string{"type", "api", "name", "fields", "fields_under_root", - "tags", "processors", "index"} + "tags", "processors", "index", "id", "meta", "revision"} // ConfigCommon is the common configuration data used to instantiate a new // EventLog. Each implementation is free to support additional configuration