diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-add-user-to-group-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-add-user-to-group-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-add-user-to-group-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-add-user-to-group-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-assume-role-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-assume-role-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-assume-role-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-assume-role-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-change-password-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-change-password-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-change-password-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-change-password-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-cloudtrail-digest-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-cloudtrail-digest-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-cloudtrail-digest-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-cloudtrail-digest-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-console-login-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-console-login-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-console-login-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-console-login-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-access-key-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-access-key-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-access-key-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-access-key-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-group-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-group-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-group-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-group-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-key-pair-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-key-pair-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-key-pair-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-key-pair-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-trail-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-trail-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-trail-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-trail-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-user-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-user-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-user-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-user-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-virtual-mfa-device-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-virtual-mfa-device-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-virtual-mfa-device-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-create-virtual-mfa-device-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-deactivate-mfa-device-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-deactivate-mfa-device-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-deactivate-mfa-device-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-deactivate-mfa-device-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-access-key-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-access-key-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-access-key-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-access-key-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-bucket-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-bucket-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-bucket-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-bucket-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-group-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-group-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-group-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-group-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-ssh-public-key-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-ssh-public-key-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-ssh-public-key-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-ssh-public-key-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-trail-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-trail-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-trail-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-trail-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-user-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-user-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-user-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-user-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-virtual-mfa-device-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-virtual-mfa-device-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-virtual-mfa-device-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-delete-virtual-mfa-device-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-enable-mfa-device-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-enable-mfa-device-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-enable-mfa-device-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-enable-mfa-device-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-insight-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-insight-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-insight-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-insight-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-remove-user-from-group-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-remove-user-from-group-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-remove-user-from-group-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-remove-user-from-group-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-start-logging-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-start-logging-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-start-logging-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-start-logging-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-stop-logging-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-stop-logging-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-stop-logging-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-stop-logging-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-access-key-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-access-key-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-access-key-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-access-key-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-accout-password-policy-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-accout-password-policy-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-accout-password-policy-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-accout-password-policy-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-group-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-group-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-group-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-group-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-login-profile-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-login-profile-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-login-profile-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-login-profile-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-ssh-public-key-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-ssh-public-key-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-ssh-public-key-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-ssh-public-key-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-trail-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-trail-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-trail-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-trail-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-user-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-user-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-user-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-update-user-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-upload-ssh-public-key-json.log-config.yml b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-upload-ssh-public-key-json.log-config.yml index 03342bc2d..c39dc3861 100644 --- a/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-upload-ssh-public-key-json.log-config.yml +++ b/test/packages/aws/data_stream/cloudtrail/_dev/test/pipeline/test-upload-ssh-public-key-json.log-config.yml @@ -1,4 +1,2 @@ ---- - dynamic_fields: - event.ingested: ".*" - +dynamic_fields: + event.ingested: ".*" diff --git a/test/packages/nginx/data_stream/access/_dev/test/pipeline/test-access-event.json-config.yml b/test/packages/nginx/data_stream/access/_dev/test/pipeline/test-access-event.json-config.yml index 843387dc5..66b4a2670 100644 --- a/test/packages/nginx/data_stream/access/_dev/test/pipeline/test-access-event.json-config.yml +++ b/test/packages/nginx/data_stream/access/_dev/test/pipeline/test-access-event.json-config.yml @@ -1,6 +1,4 @@ ---- - fields: - event.custom_property: "foobar" - dynamic_fields: - url.original: "^/.*$" - +fields: + event.custom_property: "foobar" +dynamic_fields: + url.original: "^/.*$" diff --git a/test/packages/nginx/data_stream/access/_dev/test/pipeline/test-access-raw.log-config.yml b/test/packages/nginx/data_stream/access/_dev/test/pipeline/test-access-raw.log-config.yml index dc40f48de..1de289b7e 100644 --- a/test/packages/nginx/data_stream/access/_dev/test/pipeline/test-access-raw.log-config.yml +++ b/test/packages/nginx/data_stream/access/_dev/test/pipeline/test-access-raw.log-config.yml @@ -1,8 +1,6 @@ ---- - multiline: - first_line_pattern: "^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}" - fields: - @timestamp: "2020-04-28T11:07:58.223Z" - dynamic_fields: - url.original: "^/.*$" - +multiline: + first_line_pattern: "^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}" +fields: + "@timestamp": "2020-04-28T11:07:58.223Z" +dynamic_fields: + url.original: "^/.*$" diff --git a/test/packages/nginx/data_stream/access/_dev/test/pipeline/test-access-single.log-config.yml b/test/packages/nginx/data_stream/access/_dev/test/pipeline/test-access-single.log-config.yml index 052079bda..958d74a23 100644 --- a/test/packages/nginx/data_stream/access/_dev/test/pipeline/test-access-single.log-config.yml +++ b/test/packages/nginx/data_stream/access/_dev/test/pipeline/test-access-single.log-config.yml @@ -1,6 +1,4 @@ ---- - multiline: - first_line_pattern: "^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}" - fields: - @timestamp: "2020-04-28T11:07:58.223Z" - +multiline: + first_line_pattern: "^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}" +fields: + "@timestamp": "2020-04-28T11:07:58.223Z" diff --git a/test/packages/nginx/data_stream/error/_dev/test/pipeline/test-error-raw.log-config.yml b/test/packages/nginx/data_stream/error/_dev/test/pipeline/test-error-raw.log-config.yml index 60c3026f5..12cc9c65b 100644 --- a/test/packages/nginx/data_stream/error/_dev/test/pipeline/test-error-raw.log-config.yml +++ b/test/packages/nginx/data_stream/error/_dev/test/pipeline/test-error-raw.log-config.yml @@ -1,6 +1,4 @@ ---- - multiline: - first_line_pattern: "^\\d{4}\\/\\d{2}\\/\\d{2} " - fields: - @timestamp: "2020-04-28T11:07:58.223Z" - +multiline: + first_line_pattern: "^\\d{4}\\/\\d{2}\\/\\d{2} " +fields: + "@timestamp": "2020-04-28T11:07:58.223Z" diff --git a/test/packages/nginx/data_stream/ingress_controller/_dev/test/pipeline/test-ingest-raw.log-config.yml b/test/packages/nginx/data_stream/ingress_controller/_dev/test/pipeline/test-ingest-raw.log-config.yml index 052079bda..958d74a23 100644 --- a/test/packages/nginx/data_stream/ingress_controller/_dev/test/pipeline/test-ingest-raw.log-config.yml +++ b/test/packages/nginx/data_stream/ingress_controller/_dev/test/pipeline/test-ingest-raw.log-config.yml @@ -1,6 +1,4 @@ ---- - multiline: - first_line_pattern: "^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}" - fields: - @timestamp: "2020-04-28T11:07:58.223Z" - +multiline: + first_line_pattern: "^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}" +fields: + "@timestamp": "2020-04-28T11:07:58.223Z"