Skip to content

[kubernetes/auditlogs] Fix typo in auditlogs ingest pipeline#10421

Merged
tetianakravchenko merged 4 commits into
elastic:mainfrom
tetianakravchenko:k8s-auditlogs-fix2
Jul 9, 2024
Merged

[kubernetes/auditlogs] Fix typo in auditlogs ingest pipeline#10421
tetianakravchenko merged 4 commits into
elastic:mainfrom
tetianakravchenko:k8s-auditlogs-fix2

Conversation

@tetianakravchenko

Copy link
Copy Markdown
Contributor

Proposed commit message

  • WHAT: Fix typo in auditlogs ingest pipeline
  • WHY: field in if must be the same as defined in copy_from:
- set:
      if: ctx.kubernetes?.audit?.user?.userAgent != null    <- must be the same as in `copy_from`
      field: user_agent.original
      copy_from: kubernetes.audit.userAgent
      ignore_empty_value: true

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.

Author's Checklist

  • [ ]

How to test this PR locally

Related issues

Screenshots

Signed-off-by: Tetiana Kravchenko <tetiana.kravchenko@elastic.co>
Signed-off-by: Tetiana Kravchenko <tetiana.kravchenko@elastic.co>
@tetianakravchenko tetianakravchenko requested a review from a team as a code owner July 9, 2024 09:38
@tetianakravchenko

Copy link
Copy Markdown
Contributor Author

/test

@elasticmachine

Copy link
Copy Markdown

🚀 Benchmarks report

Package kubernetes 👍(0) 💚(0) 💔(1)

Expand to view
Data stream Previous EPS New EPS Diff (%) Result
container_logs 111111.11 90909.09 -20202.02 (-18.18%) 💔

To see the full report comment with /test benchmark fullreport

@elasticmachine

Copy link
Copy Markdown

💚 Build Succeeded

History

@elastic-sonarqube

Copy link
Copy Markdown

@tetianakravchenko tetianakravchenko merged commit 21e204f into elastic:main Jul 9, 2024
@elasticmachine

Copy link
Copy Markdown

Package kubernetes - 1.63.1 containing this change is available at https://epr.elastic.co/search?package=kubernetes

orestisfl pushed a commit to orestisfl/integrations that referenced this pull request May 15, 2026
…#10421)

* fix typo in auditlogs

Signed-off-by: Tetiana Kravchenko <tetiana.kravchenko@elastic.co>

* remove processor used for local testing

Signed-off-by: Tetiana Kravchenko <tetiana.kravchenko@elastic.co>

* Update changelog.yml

---------

Signed-off-by: Tetiana Kravchenko <tetiana.kravchenko@elastic.co>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants