[8.10](backport #36767) [syslog processor] Fix 'when' conditions (#36768

) Fix the ability to use `when` conditions with the syslog processor. Fixes #36762 (cherry picked from commit c9d17a7)
elastic · Oct 5, 2023 · 7877074 · 7877074
1 parent 2bd6ccc
commit 7877074
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
@@ -51,6 +51,7 @@ https://github.com/elastic/beats/compare/v8.8.1\...main[Check the HEAD diff]
 - 'add_cloud_metadata' processor - update azure metadata api version to get missing `cloud.account.id` field
 - Upgraded apache arrow library used in x-pack/libbeat/reader/parquet from v11 to v12.0.1 in order to fix cross-compilation issues {pull}35640[35640]
 - Fix panic when MaxRetryInterval is specified, but RetryInterval is not {pull}35820[35820]
+- syslog processor - Fix the ability to use `when` conditions on the processor. {issue}36762[36762]
 
 
 *Auditbeat*

diff --git a/libbeat/processors/syslog/syslog.go b/libbeat/processors/syslog/syslog.go
@@ -89,6 +89,7 @@ func init() {
 				"ignore_missing",
 				"ignore_failure",
 				"tag",
+				"when",
 			),
 		),
 	)
-Original file line number
+Diff line change
@@ Expand Up / @@ -89,6 +89,7 @@ func init() { @@
     				"ignore_missing",
     				"ignore_failure",
     				"tag",
+    				"when",
     			),
     		),
     	)
@@ Expand Down @@