I’m trying to create a function in a pipeline using fields that have been extracted from an Extactor via GROK pattern matching. For starters I am just trying to print the fields using pipeline debug but I just get this log line:
2020-01-27T12:58:26.361Z INFO [Function] PIPELINE DEBUG: Passed value is NULL.
My fields are being correctly parsed as expected…
And I have also set the message processor order to use “Message Filter Chain” before the “Pipeline Processor”.
I have the following simple rule set:
rule “debug vars”
If I change
then it prints the source correctly.
Any help appreciated.