-
Notifications
You must be signed in to change notification settings - Fork 474
[azure_frontdoor] Fix Azure frontdoor preserve original event #7464
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[azure_frontdoor] Fix Azure frontdoor preserve original event #7464
Conversation
/test |
🌐 Coverage report
|
|
||
on_failure: | ||
- set: | ||
field: event.kind | ||
value: pipeline_error | ||
- append: | ||
field: error.message | ||
value: '{{{ _ingest.on_failure_message }}}' | ||
value: '{{{ _ingest.on_failure_message }}}' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
value: '{{{ _ingest.on_failure_message }}}' | |
value: '{{{ _ingest.on_failure_message }}}' |
(this fixes the missing trailing new line in the file)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Doesn't look like a change is able to be applied above.
packages/azure_frontdoor/data_stream/access/elasticsearch/ingest_pipeline/default.yml
Show resolved
Hide resolved
packages/azure_frontdoor/data_stream/waf/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
packages/azure_frontdoor/data_stream/waf/elasticsearch/ingest_pipeline/default.yml
Show resolved
Hide resolved
@efd6 👋 |
/test |
packages/azure_frontdoor/data_stream/waf/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
packages/azure_frontdoor/data_stream/access/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
…pipeline/default.yml Co-authored-by: Dan Kortschak <90160302+efd6@users.noreply.github.com>
Checking in here. Anything needed here to review? |
Updated, as this got stale. Can someone please review? |
…st_pipeline/default.yml Co-authored-by: Dan Kortschak <90160302+efd6@users.noreply.github.com>
I think I resolved the issues you addressed. |
/test |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks
Package azure_frontdoor - 1.5.1 containing this change is available at https://epr.elastic.co/search?package=azure_frontdoor |
What does this PR do?
Fixes the "Preserve Original Event" feature for both Frontdoor Access and WAF data streams which has been stated here:
#6847
#6848
Checklist
changelog.yml
file.