Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tutorial Custom pipeline-mapping with integrations #1027

Open
Vince-dS opened this issue Apr 15, 2024 · 2 comments
Open

Tutorial Custom pipeline-mapping with integrations #1027

Vince-dS opened this issue Apr 15, 2024 · 2 comments
Assignees

Comments

@Vince-dS
Copy link

Vince-dS commented Apr 15, 2024

Hi Team,
In 8.8 ( same in 8.13 ?), I am testing custom pipeline+mapping along an integration. I am also looking at this document: https://www.elastic.co/guide/en/fleet/current/data-streams-pipeline-tutorial.html.

To me, there are couple of points to correct:

  • Where is the “Select Apply now and rollover.” ?
    Once updating a custom pipeline from the integration (advanced options), I do not see such option.
    I do an API request to trigger the rollover.
POST 	logs-nginx.access-default/_rollover 
  • the proposition to rollover just after the custom pipeline should add some reminder about the mapping.
    Why not emphasising to check the custom mapping according to the custom pipeline ?
    To ensure, both have been tested and are ok before triggering the roll over.

FYI, I was initially suggesting this link to a customer who has moved from on prem. to the cloud with a strong interest to add pipeline/mapping along integrations.
Thanks

PS:
it is my first doc issue - pls let me know if I need to bring more detail/context.

@kilfoyle kilfoyle transferred this issue from elastic/docs Apr 15, 2024
@kilfoyle kilfoyle self-assigned this Apr 15, 2024
@Vince-dS
Copy link
Author

@kilfoyle , fyi, while working on a training doc on this topic, I noted a reference which is mentioning rollover api instead of “Select Apply now and rollover.” :

As well, a screenshot from v8.8 :
Screenshot 2024-04-16 at 11 18 37

@kilfoyle
Copy link
Contributor

Hi @Vince-dS
I haven't really worked much with data streams or pipelines so I'm learning as I go. I tried to run through this tutorial and make the changes you suggested.

In "Step 2: Apply your ingest pipeline", as you suggest, I can add instructions to test the custom mapping:


Screenshot 2024-04-24 at 12 04 45 PM


Then, I can also add instructions to run a rollover (using the API, since I also don't see any "Apply now and rollover" button).


Screenshot 2024-04-24 at 12 08 52 PM


However,
Now, when I run this query:

GET metrics-system.cpu-default/_search
{
  "query": {
    "exists": {
      "field": "test"
    }
  }
}

I get a false result. :-(
I tried waiting 30 minutes and still no luck. If you know what I could be doing wrong I'd appreciate any tips.

{
  "took": 17,
  "timed_out": false,
  "_shards": {
    "total": 4,
    "successful": 4,
    "skipped": 0,
    "failed": 0
  },
  "hits": {
    "total": {
      "value": 234,
      "relation": "eq"
    },
    "max_score": 1,
    "hits": [
      {
        "_index": ".ds-metrics-system.cpu-default-2024.04.24-000001",
        "_id": "IlCpvz-gHJNfjmqlAAABjxDfbwc",
        "_score": 1,
        "_source": {
          "@timestamp": "2024-04-24T16:10:29.511Z",
          "agent": {
            "ephemeral_id": "e2f05e40-c57c-49cc-b20c-2cc30e2aa2e1",
            "id": "21f5ea72-f5a6-4759-87a3-413d58fc0848",
            "name": "104fb9e65f7d",
            "type": "metricbeat",
            "version": "8.13.2"
          },
          "data_stream": {
            "dataset": "system.cpu",
            "namespace": "default",
            "type": "metrics"
          },

-- cut ---

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants