Using a processor to enrich your data before ingesting with Elastic Agent
In previous recipes, we learned how to use ingest pipelines to transform data during the Elasticsearch ingestion process. In this recipe, we’ll explore a different approach, which involves parsing data at the edge – before the documents are sent to Elasticsearch – using Elastic Agent processors.
In this recipe, we’ll see how we can enrich data right at the source with custom host metadata.
Getting ready
You will need an up-and-running Elastic deployment with Elasticsearch, Kibana, and Fleet Server.
Additionally, we will leverage what we have implemented in the Creating an ingest pipeline recipe in this chapter.
The snippets for the recipe are available at https://github.com/PacktPublishing/Elastic-Stack-8.x-Cookbook/blob/main/Chapter5/snippets.md#using-processor-to-enrich-your-data-before-ingesting-with-elastic-agent.
How to do it...
- In Kibana, head to Management...
