This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
« Add Host metadata Add Kubernetes metadata »
Elastic Docs ›Fleet and Elastic Agent Guide [master] ›Define processors

Generate an ID for an event

edit

Generate an ID for an event

edit

The add_id processor generates a unique ID for an event.

Example

edit
  - add_id: ~

Configuration settings

edit

Elastic Agent processors execute before ingest pipelines, which means that they process the raw event data rather than the final event sent to Elasticsearch. For related limitations, refer to What are some limitations of using processors?

Name Required Default Description

target_field

No

@metadata._id

Field where the generated ID will be stored.

type

No

elasticsearch

Type of ID to generate. Currently only elasticsearch is supported. The elasticsearch type uses the same algorithm that Elasticsearch uses to auto-generate document IDs.
« Add Host metadata Add Kubernetes metadata »