Set Processoredit

Sets one field and associates it with the specified value. If the field already exists, its value will be replaced with the provided one.

Table 51. Set Options

Name Required Default Description

field

yes

-

The field to insert, upsert, or update. Supports template snippets.

value

yes

-

The value to be set for the field. Supports template snippets.

override

no

true

If processor will update fields with pre-existing non-null-valued field. When set to false, such fields will not be touched.

if

no

-

Conditionally execute this processor.

on_failure

no

-

Handle failures for this processor. See Handling Failures in Pipelines.

ignore_failure

no

false

Ignore failures for this processor. See Handling Failures in Pipelines.

tag

no

-

An identifier for this processor. Useful for debugging and metrics.

{
  "set": {
    "field": "host.os.name",
    "value": "{{os}}"
  }
}