From 57d288662c8549e13cff8e304ecae693b78911f8 Mon Sep 17 00:00:00 2001 From: kcreddy Date: Mon, 18 Sep 2023 14:29:44 +0530 Subject: [PATCH 1/2] update EventNormalization as false --- x-pack/filebeat/input/gcppubsub/input.go | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/x-pack/filebeat/input/gcppubsub/input.go b/x-pack/filebeat/input/gcppubsub/input.go index 6547333a5e0..c6d088b237b 100644 --- a/x-pack/filebeat/input/gcppubsub/input.go +++ b/x-pack/filebeat/input/gcppubsub/input.go @@ -154,6 +154,11 @@ func NewInput(cfg *conf.C, connector channel.Connector, inputContext input.Conte } }), ), + Processing: beat.ProcessingConfig{ + // This input only produces events with basic types so normalization + // is not required. + EventNormalization: boolPtr(false), + }, }) if err != nil { return nil, err @@ -322,3 +327,6 @@ func (in *pubsubInput) newPubsubClient(ctx context.Context) (*pubsub.Client, err return pubsub.NewClient(ctx, in.ProjectID, opts...) } + +// boolPtr returns a pointer to b. +func boolPtr(b bool) *bool { return &b } From 068b86badc3be2822cad1ebbb4a44e37fcaed8de Mon Sep 17 00:00:00 2001 From: kcreddy Date: Mon, 2 Oct 2023 16:10:30 +0530 Subject: [PATCH 2/2] Add changelog --- CHANGELOG.next.asciidoc | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 72340b4c16e..ab7bd7253a6 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -219,6 +219,7 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff] - Added support for Okta OAuth2 provider in the CEL input. {issue}36336[36336] {pull}36521[36521] - Improve error logging in HTTPJSON input. {pull}36529[36529] - Add input metrics to http_endpoint input. {issue}36402[36402] {pull}36427[36427] +- Remove Event Normalization from GCP PubSub Input. {pull}36716[36716] *Auditbeat*