[azure][activitylogs] add json processor to responseBody and requestBody#15690
Conversation
🚀 Benchmarks reportTo see the full report comment with |
…integrations into azure-activity-log-json
|
Pinging @elastic/security-service-integrations (Team:Security-Service Integrations) |
| "event_category": "ResourceHealth", | ||
| "operation_name": "Microsoft.Resourcehealth/healthevent/Updated/action", | ||
| "properties": { | ||
| "eventProperties": { |
There was a problem hiding this comment.
Shouldn't it be snake case as well? Otherwise, LGTM
There was a problem hiding this comment.
now the case of the fields isn't altered at all.
packages/azure/data_stream/activitylogs/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
packages/azure/data_stream/activitylogs/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
packages/azure/data_stream/activitylogs/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
…ipeline/default.yml Co-authored-by: Lucian Ioan <59661554+lucian-ioan@users.noreply.github.com>
…ipeline/default.yml Co-authored-by: Lucian Ioan <59661554+lucian-ioan@users.noreply.github.com>
…ipeline/default.yml Co-authored-by: Lucian Ioan <59661554+lucian-ioan@users.noreply.github.com>
chemamartinez
left a comment
There was a problem hiding this comment.
Just code owner approval as SSI owns application_gateway data stream.
|
@stefans-elastic - Lets keep the requestBody and responseBody field names in the same format and not necessary to convert it to snake case as renaming would lead to breaking change. |
@muthu-mps to clarify: requestBody and responseBody field names remain the same, right? and how about the nested fields? For example should it be: or |
Same can be applied to nested fields as well. Converting the nested fields without converting base field would lead to naming inconsistency. |
…integrations into azure-activity-log-json
|
@muthu-mps the change has been implemented. |
| } | ||
| }, | ||
| "responseBody": { | ||
| "skuTest": { |
There was a problem hiding this comment.
Can we replace with actual field name? The values can have sample data but the field names should reflect the actual name. Same applies to requestBody.
There was a problem hiding this comment.
found example of requestBody and responseBody and updated the test data
💚 Build Succeeded
History
|
|
Package azure - 1.29.0 containing this change is available at https://epr.elastic.co/package/azure/1.29.0/ |
|
Hello, just saw this update in the integration available and was checking the PR. What is being changed here? the field |
…ody (elastic#15690) * add json processor to responseBody and requestBody * extra test case * update manifest and changelog * fix field name in processor * cover requestBody in tests * update expected results * Update packages/azure/data_stream/activitylogs/elasticsearch/ingest_pipeline/default.yml Co-authored-by: Lucian Ioan <59661554+lucian-ioan@users.noreply.github.com> * Update packages/azure/data_stream/activitylogs/elasticsearch/ingest_pipeline/default.yml Co-authored-by: Lucian Ioan <59661554+lucian-ioan@users.noreply.github.com> * Update packages/azure/data_stream/activitylogs/elasticsearch/ingest_pipeline/default.yml Co-authored-by: Lucian Ioan <59661554+lucian-ioan@users.noreply.github.com> * address PR comments * update test data with real field names --------- Co-authored-by: Lucian Ioan <59661554+lucian-ioan@users.noreply.github.com>
Proposed commit message
Checklist
changelog.ymlfile.Author's Checklist
How to test this PR locally
Related issues
azure.activitylogs.properties#15421Screenshots