From the course: Learning Elastic Stack
Join today to access over 24,400 courses taught by industry experts.
Processors - Elastic Stack Tutorial
From the course: Learning Elastic Stack
Processors
- [Instructor] When we were setting up Elastic Agent, there was a field to define processors. In this lesson, we'll look at what processors are and some of the basics of how to work with them. Processors are lightweight processing components that parse, filter, transform, and enrich data at the source. The fact that they work at the source is very important. It means they can make changes to the data before it's transmitted over the network and before it's ingested into Elasticsearch. It also means that for better or worse, the load of processing the logs happens on the system that generates them rather than on a central processing server. Processors can replace Logstash filters in many use cases, and unlike Logstash filters, they're configured with a fairly human-readable syntax that's based on YAML. The syntax for configuring processors is fairly simple. For processors that should always be applied, it's just a dash and then the processor name followed by a colon, and then the…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.
