Skip to content

[Logstash] Move elastic_integration plugin usage to ES logstash-bridge. #131486

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 18 commits into
base: main
Choose a base branch
from

Conversation

mashhurs
Copy link
Contributor

Why we are doing this?

A bit info about plugin
[elastic_integration](plugin https://github.com/elastic/logstash-filter-elastic_integration) retrieves ingest pipelines for the data stream and runs Elastic integrations it resolved. In order to do so, It internally embeds the ES sources (ingest processors, ingest plugins, etc...), will be regularly built against ES (with all active branches) and released as a [ruby gem]https://rubygems.org/gems/logstash-filter-elastic_integration

The problem we are facing
When ES interfaces change (for e.g, GeoIP), result in plugin build breakage. So, we in the end, came up with a solution to introduce an agreement between elastic_integration plugin and ES, logstash-bridge module! The module wraps up any classes/modules the plugin depends on and whenever interface changes, developers will apply directly to the bridge Wrapper interfaces will stay without change. This will guarantee the plugin stability.

What this PR does?

It migrates majority plugin interface usages to the bridge. This investigation shows the plugin usage details.
Exports following modules to make visible in logstash-bridge:

  • ingest-user-agent (org.elasticsearch.ingest.useragent)
  • mapper-constant-keyword (org.elasticsearch.xpack.constantkeyword)
  • x-pack:plugin:redact (org.elasticsearch.xpack.redact)
  • :x-pack:plugin:spatial (only required ones: org.elasticsearch.xpack.spatial, org.elasticsearch.xpack.spatial.common and org.elasticsearch.xpack.spatial.search.aggregations.bucket.geogrid)
  • :x-pack:plugin:wildcard (org.elasticsearch.xpack.wildcard)

@elasticsearchmachine elasticsearchmachine added v9.2.0 external-contributor Pull request authored by a developer outside the Elasticsearch team labels Jul 17, 2025
@mashhurs mashhurs self-assigned this Jul 18, 2025
@mashhurs mashhurs marked this pull request as ready for review July 18, 2025 20:30
@mashhurs mashhurs requested a review from a team as a code owner July 18, 2025 20:30
@elasticsearchmachine elasticsearchmachine added the needs:triage Requires assignment of a team area label label Jul 18, 2025
@mashhurs mashhurs added the Team:Core/Infra Meta label for core/infra team label Jul 18, 2025
@elasticsearchmachine elasticsearchmachine removed the Team:Core/Infra Meta label for core/infra team label Jul 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
external-contributor Pull request authored by a developer outside the Elasticsearch team needs:triage Requires assignment of a team area label v9.2.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants