Processor and conversion reference

One of the main features of Mustash is conversion between pipeline representations, for execution in different contexts. A basic tool for converting ingest pipelines from ElasticSearch to Logstash is implemented with bin/ingest-convert.sh, a tool documented in Converting Ingest Node Pipelines (see Ingest converter source for more information). Mustash builds upon that concept.

The available processors are the following:

Mustash processor

ElasticSearch ingest pipeline processor

Logstash filter option

AppendProcessor

Append processor (ElasticSearch)

BytesProcessor

Bytes processor (ElasticSearch)

bytes filter (Logstash)

CommunityIDProcessor

Community ID processor (ElasticSearch)

BooleanProcessor, FloatingPointProcessor, IntegerProcessor, StringProcessor

Convert processor (ElasticSearch)

convert mutation (Logstash)

CSVProcessor

CSV processor (ElasticSearch)

csv filter (Logstash)

DateProcessor

Date processor (ElasticSearch)

date filter (Logstash)

Date index name processor (ElasticSearch)

Dissect processor (ElasticSearch)

dissect filter (Logstash)

Dot expander processor (ElasticSearch)

Drop processor (ElasticSearch)

drop filter (Logstash)

Fail processor (ElasticSearch)

Fingerprint processor (ElasticSearch)

fingerprint filter (Logstash)

GeoIP processor (ElasticSearch)

geoip filter (Logstash)

Grok processor (ElasticSearch)

grok filter (Logstash)

Gsub processor (ElasticSearch)

gsub mutation (Logstash)

HTML strip processor (ElasticSearch)

Join processor (ElasticSearch)

JsonProcessor

JSON processor (ElasticSearch)

json filter (Logstash)

KV processor (ElasticSearch)

LowercaseProcessor

Lowercase processor (ElasticSearch)

lowercase mutation (Logstash)

Network direction processor (ElasticSearch)

Redact processor (ElasticSearch)

Registered domain processor (ElasticSearch)

KeepProcessor, RemoveProcessor

Remove processor (ElasticSearch)

prune filter (Logstash)

Rename processor (ElasticSearch)

rename mutation (Logstash)

Reroute processor (ElasticSearch)

Script processor (ElasticSearch)

SetProcessor, CopyProcessor

Set processor (ElasticSearch)

add_field mutation (Logstash), copy mutation (Logstash)

Set security user processor (ElasticSearch)

SortProcessor

Sort processor (ElasticSearch)

RegexpSplitProcessor

Split processor (ElasticSearch)

split filter (Logstash)

TrimProcessor

Trim processor (ElasticSearch)

strip mutation (Logstash)

UppercaseProcessor

Uppercase processor (ElasticSearch)

uppercase mutation (Logstash)

URLDecodeProcessor

URL decode processor (ElasticSearch)

urldecode filter (Logstash)

URIPartsProcessor

URI parts processor (ElasticSearch)

UserAgentProcessor

User agent processor (ElasticSearch)

useragent filter (Logstash)