detect_mime_type processor attempts to detect a mime type for a field that
contains a given stream of bytes. The
field key contains the field used as
the data source and the
target key contains the field to populate with the detected type. It’s supported to use
@metadata. prefix for
target and set the value in the event metadata instead of fields.
processors: - detect_mime_type: field: http.request.body.content target: http.request.mime_type
In the example above: - http.request.body.content is used as the source and http.request.mime_type is set to the detected mime type
See Conditions for a list of supported conditions.