imperva_waf: improve config robustness and error reporting - #12894
Conversation
* prevent missing trailing slash from causing collection failure * avoid misleading errors resulting from collection failure
3e445dc to
93cca24
Compare
🚀 Benchmarks reportTo see the full report comment with |
💚 Build Succeeded
cc @efd6 |
|
|
Pinging @elastic/security-service-integrations (Team:Security-Service Integrations) |
|
Package imperva_cloud_waf - 1.7.0 containing this change is available at https://epr.elastic.co/package/imperva_cloud_waf/1.7.0/ |
|
im using version 1.9.0 and this part of the code is still causing an issue state.url.trim_right("/") + v.worklist[v.next].filename {"log.level":"error","@timestamp":"2025-03-07T00:47:29.705Z","message":"single event object returned by evaluation","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"cel-default","type":"cel"},"log":{"source":"cel-default"},"ecs.version":"1.6.0","input_source":"https://logs1.incapsula.com/23630_828048/","input_url":"https://logs1.incapsula.com/23630_828048/","event":{"error":{"code":"401","id":"401 Unauthorized","message":"GET https://logs1.incapsula.com/23630_82804823630_1076173.log: \r\n<title>401 Authorization Required</title>\r\n\r\n 401 Authorization Required\r\nnginx/1.25.0\r\n\r\n\r\n"}},"log.origin":{"file.line":383,"file.name":"cel/input.go","function":"github.com/elastic/beats/v7/x-pack/filebeat/input/cel.input.run.func1"},"service.name":"filebeat","id":"cel-imperva_cloud_waf.event-1ee7cae5-3f31-4f51-b04c-f542d4020a2e","log.logger":"input.cel","ecs.version":"1.6.0"} |
* prevent missing trailing slash from causing collection failure * avoid misleading errors resulting from collection failure




Proposed commit message
Note
The CEL input is not tested in system testing. So extra caution is required in review.
Checklist
changelog.ymlfile.Author's Checklist
How to test this PR locally
Related issues
Screenshots