[2018-03-03T12:35:55,585][DEBUG][logstash.pipeline        ] output received {"event"=>{"pipeline"=>{"batch_size"=>125, "workers"=>4, "representation"=>{"graph"=>{"edges"=>[{"id"=>"eae9ef6b87529278dd4e85f650e36272c375a86acf337f62831090c6fac0d36f", "type"=>"plain", "from"=>"C:\\DMARC\\*.xml", "to"=>"__QUEUE__"}, {"id"=>"1ca920b65c5609c5db74d28ee4d708a142482557cd58adc3cfa48a1002170398", "type"=>"plain", "from"=>"Field Extraction", "to"=>"IP Geo-Mapping"}, {"id"=>"557a9805e65a25cffb6cfe45d21a7990677c9576b8285c83f89e45d9e6f1c79c", "when"=>true, "type"=>"boolean", "from"=>"cd5201dfd1cafa8a4ac49b5de4ff85cc789a7e9d95d9d44d2f0f35d7d533a245", "to"=>"d4d3aafd0e41876798e46e98bef020ae0a6b70018aae25830b9170dd2e5dfa7e"}, {"id"=>"4b62dbac3cb392154d2acf991a689b73a91f7f5e6e4997cb8d48865883dcae4d", "type"=>"plain", "from"=>"IP Geo-Mapping", "to"=>"cd5201dfd1cafa8a4ac49b5de4ff85cc789a7e9d95d9d44d2f0f35d7d533a245"}, {"id"=>"97ca94412260c8523fd6a6eb0da1fd41e9a82a544015bd8c7581b480a522f8b2", "type"=>"plain", "from"=>"__QUEUE__", "to"=>"Field Extraction"}, {"id"=>"eca573854d6adf306af5c21ea5e1ad73ac05dce8ca3d43382203acbf64055176", "type"=>"plain", "from"=>"d4d3aafd0e41876798e46e98bef020ae0a6b70018aae25830b9170dd2e5dfa7e", "to"=>"Send to Elasticsearch"}, {"id"=>"2cb1c108da35e915613bbf7efbfe704f9acacb59740b7b76b8c8644a76ecc38b", "when"=>false, "type"=>"boolean", "from"=>"cd5201dfd1cafa8a4ac49b5de4ff85cc789a7e9d95d9d44d2f0f35d7d533a245", "to"=>"Send to Elasticsearch"}], "vertices"=>[{"config_name"=>"file", "explicit_id"=>true, "type"=>"plugin", "plugin_type"=>"input", "meta"=>{"source"=>{"id"=>"pipeline", "protocol"=>"str", "line"=>2, "column"=>3}}, "id"=>"C:\\DMARC\\*.xml"}, {"meta"=>nil, "id"=>"__QUEUE__", "explicit_id"=>false, "type"=>"queue"}, {"config_name"=>"xml", "explicit_id"=>true, "type"=>"plugin", "plugin_type"=>"filter", "meta"=>{"source"=>{"id"=>"pipeline", "protocol"=>"str", "line"=>15, "column"=>3}}, "id"=>"Field Extraction"}, {"config_name"=>"geoip", "explicit_id"=>true, "type"=>"plugin", "plugin_type"=>"filter", "meta"=>{"source"=>{"id"=>"pipeline", "protocol"=>"str", "line"=>49, "column"=>5}}, "id"=>"IP Geo-Mapping"}, {"config_name"=>"drop", "explicit_id"=>false, "type"=>"plugin", "plugin_type"=>"filter", "meta"=>{"source"=>{"id"=>"pipeline", "protocol"=>"str", "line"=>58, "column"=>5}}, "id"=>"d4d3aafd0e41876798e46e98bef020ae0a6b70018aae25830b9170dd2e5dfa7e"}, {"meta"=>{"source"=>{"id"=>"pipeline", "protocol"=>"str", "line"=>57, "column"=>6}}, "id"=>"cd5201dfd1cafa8a4ac49b5de4ff85cc789a7e9d95d9d44d2f0f35d7d533a245", "condition"=>"\"_geoip_lookup_failure\" in [tags]", "explicit_id"=>false, "type"=>"if"}, {"config_name"=>"elasticsearch", "explicit_id"=>true, "type"=>"plugin", "plugin_type"=>"output", "meta"=>{"source"=>{"id"=>"pipeline", "protocol"=>"str", "line"=>62, "column"=>3}}, "id"=>"Send to Elasticsearch"}]}, "type"=>"lir", "plugins"=>[{"version"=>"5.0.2", "name"=>"logstash-codec-cef"}, {"version"=>"3.0.8", "name"=>"logstash-codec-collectd"}, {"version"=>"3.0.6", "name"=>"logstash-codec-dots"}, {"version"=>"3.0.6", "name"=>"logstash-codec-edn"}, {"version"=>"3.0.8", "name"=>"logstash-codec-line"}, {"version"=>"3.0.6", "name"=>"logstash-codec-edn_lines"}, {"version"=>"3.0.6", "name"=>"logstash-codec-es_bulk"}, {"version"=>"3.1.5", "name"=>"logstash-codec-fluent"}, {"version"=>"3.0.5", "name"=>"logstash-codec-graphite"}, {"version"=>"3.0.5", "name"=>"logstash-codec-json"}, {"version"=>"3.0.5", "name"=>"logstash-codec-json_lines"}, {"version"=>"3.0.7", "name"=>"logstash-codec-msgpack"}, {"version"=>"4.1.2", "name"=>"logstash-patterns-core"}, {"version"=>"3.0.9", "name"=>"logstash-codec-multiline"}, {"version"=>"3.11.0", "name"=>"logstash-codec-netflow"}, {"version"=>"3.0.6", "name"=>"logstash-codec-plain"}, {"version"=>"3.0.5", "name"=>"logstash-codec-rubydebug"}, {"version"=>"2.7.2", "name"=>"logstash-filter-aggregate"}, {"version"=>"3.0.6", "name"=>"logstash-filter-anonymize"}, {"version"=>"3.1.2", "name"=>"logstash-filter-cidr"}, {"version"=>"3.0.5", "name"=>"logstash-filter-clone"}, {"version"=>"3.0.8", "name"=>"logstash-filter-csv"}, {"version"=>"3.1.9", "name"=>"logstash-filter-date"}, {"version"=>"1.0.3", "name"=>"logstash-filter-de_dot"}, {"version"=>"1.1.4", "name"=>"logstash-filter-dissect"}, {"version"=>"3.0.7", "name"=>"logstash-filter-dns"}, {"version"=>"3.0.5", "name"=>"logstash-filter-drop"}, {"version"=>"3.3.0", "name"=>"logstash-filter-elasticsearch"}, {"version"=>"3.1.2", "name"=>"logstash-filter-fingerprint"}, {"version"=>"5.0.3", "name"=>"logstash-filter-geoip"}, {"version"=>"4.0.2", "name"=>"logstash-filter-grok"}, {"version"=>"1.0.0", "name"=>"logstash-filter-jdbc_static"}, {"version"=>"1.0.3", "name"=>"logstash-filter-jdbc_streaming"}, {"version"=>"3.0.5", "name"=>"logstash-filter-json"}, {"version"=>"4.0.3", "name"=>"logstash-filter-kv"}, {"version"=>"4.0.5", "name"=>"logstash-filter-metrics"}, {"version"=>"3.2.0", "name"=>"logstash-filter-mutate"}, {"version"=>"3.1.3", "name"=>"logstash-filter-ruby"}, {"version"=>"3.0.6", "name"=>"logstash-filter-sleep"}, {"version"=>"3.1.6", "name"=>"logstash-filter-split"}, {"version"=>"3.0.5", "name"=>"logstash-filter-syslog_pri"}, {"version"=>"4.0.4", "name"=>"logstash-filter-throttle"}, {"version"=>"3.0.4", "name"=>"logstash-filter-translate"}, {"version"=>"1.0.4", "name"=>"logstash-filter-truncate"}, {"version"=>"3.0.6", "name"=>"logstash-filter-urldecode"}, {"version"=>"3.2.2", "name"=>"logstash-filter-useragent"}, {"version"=>"4.0.5", "name"=>"logstash-filter-xml"}, {"version"=>"5.0.6", "name"=>"logstash-input-beats"}, {"version"=>"1.1.2", "name"=>"logstash-input-dead_letter_queue"}, {"version"=>"4.2.0", "name"=>"logstash-input-elasticsearch"}, {"version"=>"3.1.5", "name"=>"logstash-input-exec"}, {"version"=>"4.0.3", "name"=>"logstash-input-file"}, {"version"=>"3.1.3", "name"=>"logstash-input-ganglia"}, {"version"=>"3.1.0", "name"=>"logstash-input-gelf"}, {"version"=>"3.0.5", "name"=>"logstash-input-generator"}, {"version"=>"5.0.3", "name"=>"logstash-input-tcp"}, {"version"=>"3.0.4", "name"=>"logstash-input-graphite"}, {"version"=>"3.0.5", "name"=>"logstash-input-heartbeat"}, {"version"=>"3.0.8", "name"=>"logstash-input-http"}, {"version"=>"4.0.4", "name"=>"logstash-input-http_poller"}, {"version"=>"3.0.5", "name"=>"logstash-input-imap"}, {"version"=>"4.3.3", "name"=>"logstash-input-jdbc"}, {"version"=>"8.0.4", "name"=>"logstash-input-kafka"}, {"version"=>"3.0.6", "name"=>"logstash-input-pipe"}, {"version"=>"6.0.2", "name"=>"logstash-input-rabbitmq"}, {"version"=>"3.1.6", "name"=>"logstash-input-redis"}, {"version"=>"3.2.0", "name"=>"logstash-input-s3"}, {"version"=>"3.0.5", "name"=>"logstash-input-snmptrap"}, {"version"=>"3.0.6", "name"=>"logstash-input-sqs"}, {"version"=>"3.2.5", "name"=>"logstash-input-stdin"}, {"version"=>"3.2.4", "name"=>"logstash-input-syslog"}, {"version"=>"3.0.7", "name"=>"logstash-input-twitter"}, {"version"=>"3.2.1", "name"=>"logstash-input-udp"}, {"version"=>"3.0.6", "name"=>"logstash-input-unix"}, {"version"=>"3.0.7", "name"=>"logstash-output-cloudwatch"}, {"version"=>"4.2.1", "name"=>"logstash-output-file"}, {"version"=>"3.0.6", "name"=>"logstash-output-csv"}, {"version"=>"9.0.2", "name"=>"logstash-output-elasticsearch"}, {"version"=>"4.1.0", "name"=>"logstash-output-email"}, {"version"=>"3.1.4", "name"=>"logstash-output-graphite"}, {"version"=>"5.2.0", "name"=>"logstash-output-http"}, {"version"=>"7.0.8", "name"=>"logstash-output-kafka"}, {"version"=>"3.1.5", "name"=>"logstash-output-lumberjack"}, {"version"=>"3.0.5", "name"=>"logstash-output-nagios"}, {"version"=>"3.0.4", "name"=>"logstash-output-null"}, {"version"=>"3.0.6", "name"=>"logstash-output-pagerduty"}, {"version"=>"3.0.5", "name"=>"logstash-output-pipe"}, {"version"=>"5.1.0", "name"=>"logstash-output-rabbitmq"}, {"version"=>"4.0.3", "name"=>"logstash-output-redis"}, {"version"=>"4.0.13", "name"=>"logstash-output-s3"}, {"version"=>"4.0.6", "name"=>"logstash-output-sns"}, {"version"=>"5.0.2", "name"=>"logstash-output-sqs"}, {"version"=>"3.1.3", "name"=>"logstash-output-stdout"}, {"version"=>"5.0.2", "name"=>"logstash-output-tcp"}, {"version"=>"3.0.5", "name"=>"logstash-output-udp"}, {"version"=>"3.0.5", "name"=>"logstash-output-webhdfs"}, {"version"=>"6.2.2", "name"=>"x-pack"}], "version"=>"0.0.0", "hash"=>"7a46f30a082988e76d9f3c74c89527c8d27c2f0cadde6ef0fe3917496fe91ce8"}, "id"=>"dmarcxml","ephemeral_id"=>"63477807-e6ba-4580-8cd5-ec7cbff37791", "hash"=>"7a46f30a082988e76d9f3c74c89527c8d27c2f0cadde6ef0fe3917496fe91ce8"}}}