:plugin: pipe :type: input :default_codec: plain /////////////////////////////////////////// START - GENERATED VARIABLES, DO NOT EDIT! /////////////////////////////////////////// :version: %VERSION% :release_date: %RELEASE_DATE% :changelog_url: %CHANGELOG_URL% :include_path: ../../../../logstash/docs/include /////////////////////////////////////////// END - GENERATED VARIABLES, DO NOT EDIT! /////////////////////////////////////////// [id="plugins-{type}s-{plugin}"] === Pipe input plugin include::{include_path}/plugin_header.asciidoc[] ==== Description Stream events from a long running command pipe. By default, each event is assumed to be one line. If you want to join lines, you'll want to use the multiline codec. [id="plugins-{type}s-{plugin}-ecs"] ==== Compatibility with the Elastic Common Schema (ECS) This plugin adds extra fields about the event's source. Configure the <> option if you want to ensure that these fields are compatible with {ecs-ref}[ECS]. These fields are added after the event has been decoded by the appropriate codec, and will not overwrite existing values. |======== | ECS Disabled | ECS v1 , v8 | Description | `host` | `[host][name]` | The name of the {ls} host that processed the event | `command` | `[process][command_line]` | The command run by the plugin |======== [id="plugins-{type}s-{plugin}-options"] ==== Pipe Input Configuration Options This plugin supports the following configuration options plus the <> described later. [cols="<,<,<",options="header",] |======================================================================= |Setting |Input type|Required | <> |<>|Yes | <> |<>|No |======================================================================= Also see <> for a list of options supported by all input plugins.   [id="plugins-{type}s-{plugin}-command"] ===== `command` * This is a required setting. * Value type is <> * There is no default value for this setting. Command to run and read events from, one line at a time. Example: [source,ruby] ----- input { pipe { command => "echo ¡Hola!" } } ----- [id="plugins-{type}s-{plugin}-ecs_compatibility"] ===== `ecs_compatibility` * Value type is <> * Supported values are: ** `disabled`: uses backwards compatible field names, such as `[host]` ** `v1`, `v8`: uses fields that are compatible with ECS, such as `[host][name]` Controls this plugin's compatibility with the {ecs-ref}[Elastic Common Schema (ECS)]. See <> for detailed information. **Sample output: ECS enabled** [source,ruby] ----- { "@timestamp"=>2021-11-16T09:18:45.306Z, "message" => "¡Hola!", "process" => { "command_line" => "echo '¡Hola!'" }, "host" => { "name" => "deus-ex-machina" } } ----- **Sample output: ECS disabled** [source,ruby] ----- { "@timestamp"=>2021-11-16T09:18:45.306Z, "message" => "¡Hola!", "command" => "echo '¡Hola!'", "host" => "deus-ex-machina" } ----- [id="plugins-{type}s-{plugin}-common-options"] include::{include_path}/{type}.asciidoc[] :default_codec!: