Beats version: 7.11.2
The dedot functionallity cannot be disabled for annotations, even with annotations.dedot: false.
Using this Filebeat configuration we can expect to index documents with fields named like cls.department.
filebeat.autodiscover:
providers:
- type: kubernetes
include_annotations: ["cls.department", "cls.project", "cls.logsource", "cls.environment"]
annotations.dedot: false
But the document ends up indexed with fields cls_department - they are "dedotted" anyway.
According to the code, it is explained by the fact that we ignore annotations.dedot and we use labels.dedot.
|
annotationsMap := generateMapSubset(accessor.GetAnnotations(), r.config.IncludeAnnotations, r.config.LabelsDedot) |
Beats version: 7.11.2
The dedot functionallity cannot be disabled for annotations, even with
annotations.dedot: false.Using this Filebeat configuration we can expect to index documents with fields named like
cls.department.But the document ends up indexed with fields
cls_department- they are "dedotted" anyway.According to the code, it is explained by the fact that we ignore
annotations.dedotand we uselabels.dedot.beats/libbeat/common/kubernetes/metadata/resource.go
Line 64 in 7729cd7