Docker build with filebeats => 7.9.0 failed

[hasnat]

Docker build with filebeats => 7.9.0 failed

[barthex]

Thanks for quick response. The highest version of Filebeat for which compilation succeed is 7.8.1. For version 7.9.0, the apm agent has been added.

[hasnat]

example Dockerfile here is bit old now, you'd probably need to update golang version to match 7.17.5's go version; which likely will then make you move to go mod lastly the beats/filebeat version compatiblity.
I can try updating example sometime during the week.

[barthex]

@hasnat I resolved my task by using the filebeat script preprocessor, there is no need to rebuild for a new version of filebeat

processors:
      - script:
          lang: javascript
          id: replace_incident
          source: >
            function process(event) { event.Put("incident", event.Get("request.fake_body").replace("incident=","")); }
      - decode_json_fields:
          fields: ["incident"]

[hasnat]

Nice. Didn't know about this. Guess this feature makes this processor redundant.

[hasnat]

not updating to newer filebeat and closing this, since we have alternate ways for newer versions.