description: Pipeline for parsing the Elasticsearch deprecation log file in JSON format.
on_failure:
- set:
field: error.message
value: '{{ _ingest.on_failure_message }}'
processors:
- pipeline:
if: '!ctx.message.contains("ecs.version")'
name: '{< IngestPipeline "pipeline-json-7" >}'
- pipeline:
if: 'ctx.message.contains("ecs.version")'
name: '{< IngestPipeline "pipeline-json-8" >}'