This functionality is experimental and may be changed or removed completely in a
future release. Elastic will take a best effort approach to fix any issues, but
experimental features are not subject to the support SLA of official GA
features.
Detect mime type
editDetect mime type
editThe detect_mime_type processor attempts to detect a mime type for a field that
contains a given stream of bytes. The field key contains the field used as
the data source and the target key contains the field to populate with the detected type
processors:
- detect_mime_type:
field: http.request.body.content
target: http.request.mime_type
In the example above: - http.request.body.content is used as the source and http.request.mime_type is set to the detected mime type
See Conditions for a list of supported conditions.