From 73f07208e6c3445147cc86f3b7608ce3987bc9e4 Mon Sep 17 00:00:00 2001 From: "Lee E. Hinman" Date: Tue, 8 Mar 2022 14:27:45 -0600 Subject: [PATCH] [Filebeat] httpjson update docs - update documentation for accessing last_response.url.params in httpjson input. --- CHANGELOG.next.asciidoc | 1 + x-pack/filebeat/docs/inputs/input-httpjson.asciidoc | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index cd16cdfd8239..4cbe600fcf20 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -56,6 +56,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...main[Check the HEAD dif - elasticsearch: fix duplicate ingest when using a common appender configuration {issue}30428[30428] {pull}30440[30440] - Fix compatibility with ECS by renaming `source` log key to `source_file` {issue}30667[30667] - Fix add_kubernetes_metadata matcher: support rotated logs when `resource_type: pod` {pull}30720[30720] +- Update documentation for accessing `last_response.url.params` in httpjson input. {pull}30739[30739] *Filebeat* diff --git a/x-pack/filebeat/docs/inputs/input-httpjson.asciidoc b/x-pack/filebeat/docs/inputs/input-httpjson.asciidoc index 15860c458252..22a116781385 100644 --- a/x-pack/filebeat/docs/inputs/input-httpjson.asciidoc +++ b/x-pack/filebeat/docs/inputs/input-httpjson.asciidoc @@ -106,7 +106,7 @@ The `httpjson` input keeps a runtime state between requests. This state can be a The state has the following elements: - `last_response.url.value`: The full URL with params and fragments from the last request with a successful response. -- `last_response.url.params`: A map containing the params from the URL in `last_response.url.value`. +- `last_response.url.params`: A https://pkg.go.dev/net/url#Values[`url.Values`] of the params from the URL in `last_response.url.value`. Can be queried with the https://pkg.go.dev/net/url#Values.Get[`Get`] function. - `last_response.header`: A map containing the headers from the last successful response. - `last_response.body`: A map containing the parsed JSON body from the last successful response. This is the response as it comes from the remote server. - `last_response.page`: A number indicating the page number of the last response.