Generate an ID for an eventedit

The add_id processor generates a unique ID for an event.

Exampleedit

  - add_id: ~

Configuration settingsedit

Elastic Agent processors execute before ingest pipelines, which means that they process the raw event data rather than the final event sent to Elasticsearch. For related limitations, refer to What are some limitations of using processors?

Name Required Default Description

target_field

No

@metadata._id

Field where the generated ID will be stored.

type

No

elasticsearch

Type of ID to generate. Currently only elasticsearch is supported. The elasticsearch type uses the same algorithm that Elasticsearch uses to auto-generate document IDs.