IMPORTANT: No additional bug fixes or documentation updates
will be released for this version. For the latest information, see the
current release documentation.
Add labelsedit
The add_labels
processors adds a set of key-value pairs to an event. The
processor flattens nested configuration objects like arrays or dictionaries into
a fully qualified name by merging nested names with a dot (.
). Array entries
create numeric names starting with 0. Labels are always stored under the Elastic
Common Schema compliant labels
sub-dictionary.
Exampleedit
This configuration:
- add_labels: labels: number: 1 with.dots: test nested: with.dots: nested array: - do - re - with.field: mi
Adds these fields to every event:
{ "labels": { "number": 1, "with.dots": "test", "nested.with.dots": "nested", "array.0": "do", "array.1": "re", "array.2.with.field": "mi" } }
Configuration settingsedit
Elastic Agent processors execute before ingest pipelines, which means that they process the raw event data rather than the final event sent to Elasticsearch. For related limitations, refer to What are some limitations of using processors?
Name | Required | Default | Description |
---|---|---|---|
|
Yes |
Dictionaries of labels to be added. |