This functionality is experimental and may be changed or removed completely in a future release. Elastic will take a best effort approach to fix any issues, but experimental features are not subject to the support SLA of official GA features.
fingerprint processor generates a fingerprint of an event based on a
specified subset of its fields.
processors: - fingerprint: fields: ["field1", "field2", ...]
The following settings are supported:
- List of fields to use as the source for the fingerprint.
(Optional) Whether to ignore missing fields. Default is
(Optional) Field in which the generated fingerprint should be stored. Default is
(Optional) Algorithm to use for computing the fingerprint. Must be one of:
xxhash. Default is
(Optional) Encoding to use on the fingerprint value. Must be one of
base64. Default is