From 111d278fc6833b4a8912ed0db86398d761dcfc73 Mon Sep 17 00:00:00 2001 From: David Kilfoyle Date: Tue, 15 Oct 2024 13:55:20 -0400 Subject: [PATCH] Add docs for dynamic topics in Kafka output --- .../fleet/fleet-settings-output-kafka.asciidoc | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/docs/en/ingest-management/fleet/fleet-settings-output-kafka.asciidoc b/docs/en/ingest-management/fleet/fleet-settings-output-kafka.asciidoc index 9531d372e..12e64ff4a 100644 --- a/docs/en/ingest-management/fleet/fleet-settings-output-kafka.asciidoc +++ b/docs/en/ingest-management/fleet/fleet-settings-output-kafka.asciidoc @@ -219,7 +219,18 @@ Use this option to set the Kafka topic for each {agent} event. [id="kafka-output-topics-default"] **Default topic** -| Set a default topic to use for events sent by {agent} to the Kafka output, for example `elastic-agent`. +| Set a default topic to use for events sent by {agent} to the Kafka output. + +You can set a static topic, for example `elastic-agent`, or you can choose to set a topic dynamically based on an {ecs-ref}/ecs-reference.html[Elastic Common Scheme (ECS)] field. Available fields include: + +* `data_stream_type` +* `data_stream.dataset` +* `data_stream.namespace` +* `@timestamp` +* `event-dataset` + +You can also set a custom field. This is useful if you're using the <> as part of your {agent} input. +Otherwise, setting a custom field is not recommended. |===