|
5 | 5 | ///////////////////////////////////////////
|
6 | 6 | START - GENERATED VARIABLES, DO NOT EDIT!
|
7 | 7 | ///////////////////////////////////////////
|
8 |
| -:version: v6.2.7 |
9 |
| -:release_date: 2023-05-12 |
10 |
| -:changelog_url: https://github.com/logstash-plugins/logstash-codec-cef/blob/v6.2.7/CHANGELOG.md |
| 8 | +:version: v6.2.8 |
| 9 | +:release_date: 2024-10-22 |
| 10 | +:changelog_url: https://github.com/logstash-plugins/logstash-codec-cef/blob/v6.2.8/CHANGELOG.md |
11 | 11 | :include_path: ../../../../logstash/docs/include
|
12 | 12 | ///////////////////////////////////////////
|
13 | 13 | END - GENERATED VARIABLES, DO NOT EDIT!
|
@@ -408,6 +408,7 @@ The following is a mapping between these fields.
|
408 | 408 | | <<plugins-{type}s-{plugin}-locale>> |<<string,string>>|No
|
409 | 409 | | <<plugins-{type}s-{plugin}-name>> |<<string,string>>|No
|
410 | 410 | | <<plugins-{type}s-{plugin}-product>> |<<string,string>>|No
|
| 411 | +| <<plugins-{type}s-{plugin}-raw_data_field>> |<<string,string>>|No |
411 | 412 | | <<plugins-{type}s-{plugin}-reverse_mapping>> |<<boolean,boolean>>|No
|
412 | 413 | | <<plugins-{type}s-{plugin}-severity>> |<<string,string>>|No
|
413 | 414 | | <<plugins-{type}s-{plugin}-signature>> |<<string,string>>|No
|
@@ -536,6 +537,13 @@ When this codec is used in an Output Plugin, this option can be used to specify
|
536 | 537 | value of the device product field in CEF header. The new value can include `%{foo}` strings
|
537 | 538 | to help you build a new value from other parts of the event.
|
538 | 539 |
|
| 540 | +[id="plugins-{type}s-{plugin}-raw_data_field"] |
| 541 | +===== `raw_data_field` |
| 542 | + |
| 543 | + * Value type is <<string,string>> |
| 544 | + * There is no default value for this setting |
| 545 | + |
| 546 | +Store the raw data to the field, for example `[event][original]`. Existing target field will be overriden. |
539 | 547 |
|
540 | 548 | [id="plugins-{type}s-{plugin}-reverse_mapping"]
|
541 | 549 | ===== `reverse_mapping`
|
|
0 commit comments