Logstash User Agent Filter vs. ECS Fields

[ave19]

Just a place holder for future discussion. I feel like the plugin doesn't parse out what we need to fill in the user_agent information and maybe it should? Obviously, that's a battle for another time, though.

[ruflin]

Good point. user_agent was initially fully inspired by what the ingest processor in Elasticsearch does but I'm not too happy anymore with the object. We definitively should look into what LS does.

[webmat]

This will be resolved by logstash-plugins/logstash-filter-useragent#66

See also logstash-plugins/logstash-filter-useragent#66 and elastic/logstash#11635 for a higher level overview of what's coming in Logstash.