description: Pipeline for parsing the Elasticsearch deprecation log file in JSON format.
on_failure:
- set:
    field: error.message
    value: '{{ _ingest.on_failure_message }}'
processors:
- json:
    field: message
    add_to_root: true
- dot_expander:
    field: '*'
    override: true
- set:
    field: event.dataset
    value: elasticsearch.deprecation
