-
Notifications
You must be signed in to change notification settings - Fork 474
Add support for azure logs integration #272
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pinging @elastic/integrations (Team:Integrations) |
@@ -0,0 +1,45 @@ | |||
--- | |||
description: Pipeline for parsing azure activity logs. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I see this file is reused across all datasets, but because of implementation it's not "shared" anymore, right? I wonder what would be the best way to handle this
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe we can use YAML references or something that are resolved at either package build time (so the file is duplicated) or in Kibana at runtime when the package is consumed. Or maybe a symlink might work too, although that might be problematic for Windows package developers?
Let's move this discussion to the package-spec repo so we don't hold up this PR? Depending on the outcome we can come back and update all packages with shared assets like this one.
Since this package will accommodate both logs ( including AD logs) and metrics I suggest calling it Any additional packages that might come up later (e.g. for billing, app insights) can be more specific, like |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Add support for azure logs integration
ex log:
Dashboards look good.