Fix extra fields for Beats

fixes #296
NETWAYS · Jan 15, 2024 · aa9557e · aa9557e
1 parent e0996b6
commit aa9557e
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 1 deletion.
diff --git a/molecule/beats_peculiar/converge.yml b/molecule/beats_peculiar/converge.yml
@@ -18,6 +18,8 @@
           pattern: '^[[:space:]]+(at|\.{3})[[:space:]]+\b|^Caused by:'
           negate: false
           match: after
+        fields:
+          testfield: thisisatest
     elasticsearch_jna_workaround: true
     elasticsearch_disable_systemcallfilterchecks: true
     elasticstack_full_stack: false

diff --git a/molecule/beats_peculiar/verify.yml b/molecule/beats_peculiar/verify.yml
@@ -26,3 +26,7 @@
       when:
         - beats_filebeat_version.stdout.find('8.4.1') == -1
         - elasticstack_release == 8
+
+    - name: Check for fields being set
+      ansible.builtin.command: >
+        pcregrep -M 'fields:(\n).*testfield: thisisatest' /etc/filebeeat/filebeat.yml
diff --git a/roles/beats/templates/filebeat.yml.j2 b/roles/beats/templates/filebeat.yml.j2
@@ -12,7 +12,7 @@ filebeat.inputs:
   fields:
 {% if beats_fields is defined %}
 {% for field in beats_fields %}
-    {{ field }}
+    {{ field }}: beats_fields['field']
 {% endfor %}
 {% endif %}
 {% if beats_filebeat_log_inputs[input].fields is defined %}