update log_type field to be ignored if value is nil

cloud-gov · Dec 20, 2024 · 3edf96e · 3edf96e
1 parent 8e58ed6
commit 3edf96e
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/lib/logstash/inputs/cloudwatch_logs.rb b/lib/logstash/inputs/cloudwatch_logs.rb
@@ -173,8 +173,6 @@ def map_group_to_log_type(group)
       'opensearch'
     when %r{/aws/ElasticCache/.*}i
       'elasticache'
-    else
-      'unknown log type'
     end
   end
 
@@ -248,7 +246,7 @@ def process_log(log, group, log_type)
       event.set('[cloudwatch_logs][log_stream]', log.log_stream_name)
       event.set('[cloudwatch_logs][event_id]', log.event_id)
       event.set('[cloudwatch_logs][tags]', tags)
-      event.set('[cloudwatch_logs][log_type]', log_type)
+      event.set('[cloudwatch_logs][log_type]', log_type) unless log_type.nil?
       decorate(event)
 
       @queue << event