Skip to content
This repository was archived by the owner on Sep 21, 2023. It is now read-only.
This repository was archived by the owner on Sep 21, 2023. It is now read-only.

ES output marshalling entire gRPC object #240

@fearful-symmetry

Description

@fearful-symmetry

Right now, the shipper is marshaling the entire gRPC object to JSON before sending it to ES, resulting in some mapping errors:

"Limit of mapping depth [20] has been exceeded due to object field [fields.data.system.Kind.StructValue.data.memory.Kind.StructValue.data.actual.Kind.StructValue.data.used.Kind.StructValue.data.bytes.Kind]

There's a TODO for this already in the ES output:

func serializeEvent(event *messages.Event) ([]byte, error) {
	// TODO: we need to preprocessing the raw protobuf to get fields in the
	// right place for ECS. This just translates the protobuf structure
	// directly to json.
	return json.Marshal(event)
}

Metadata

Metadata

Labels

Team:Elastic-AgentLabel for the Agent teambugSomething isn't working

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions