Skip to content

Testing the LLM tool with the Zeek integration#15946

Closed
alaudazzi wants to merge 6 commits intoelastic:mainfrom
alaudazzi:test-llm-with-zeek
Closed

Testing the LLM tool with the Zeek integration#15946
alaudazzi wants to merge 6 commits intoelastic:mainfrom
alaudazzi:test-llm-with-zeek

Conversation

@alaudazzi
Copy link
Contributor

@alaudazzi alaudazzi commented Nov 12, 2025 •
edited
Loading

This PR tests the LLM Integration Documentation Generation tool.
This test is part of the OnWeek activities.
Relates to https://github.com/elastic/integration-experience/issues/407
Closes https://github.com/elastic/integration-experience/issues/407

Generative AI disclosure

  1. Did you use a generative AI (GenAI) tool to assist in creating this contribution?
  • Yes
  • No

Tool(s) and model(s) used:
Cursor and gpt-5
@alaudazzi alaudazzi requested a review from mjwolf November 12, 2025 06:49
@alaudazzi alaudazzi self-assigned this Nov 12, 2025
@alaudazzi alaudazzi added the documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. label Nov 12, 2025
@alaudazzi alaudazzi changed the title Testing LLM-base doc generation with the Zeek integration Nov 13, 2025
@elastic-vault-github-plugin-prod
Copy link

elastic-vault-github-plugin-prod bot commented Nov 28, 2025

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport
@elasticmachine
Copy link

elasticmachine commented Nov 28, 2025

💚 Build Succeeded

History

cc @alaudazzi
@mjwolf mjwolf self-assigned this Nov 29, 2025
@alaudazzi alaudazzi marked this pull request as ready for review December 1, 2025 10:24
@alaudazzi alaudazzi requested a review from a team as a code owner December 1, 2025 10:24
@andrewkroh andrewkroh added the Team:Integration-Experience Security Integrations Integration Experience [elastic/integration-experience] label Dec 1, 2025
@elasticmachine
Copy link

elasticmachine commented Dec 1, 2025

Pinging @elastic/integration-experience (Team:Integration-Experience)
bmorelli25
bmorelli25 requested changes Dec 3, 2025
View reviewed changes
packages/zeek/docs/README.md
Comment on lines +8943 to +8956
<details>
<summary>logfile</summary>

## Setup
For more details about the logfile input settings, check the [Filebeat documentation](https://www.elastic.co/docs/reference/beats/filebeat/filebeat-input-log).

### Collecting logs from logfile

To collect logs via logfile, select **Collect logs via the logfile input** and configure the following parameter:

- Paths: List of glob-based paths to crawl and fetch log files from. Supports glob patterns like
`/var/log/*.log` or `/var/log/*/*.log` for subfolder matching. Each file found starts a
separate harvester.
</details>
Copy link
Member

@bmorelli25 bmorelli25 Dec 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This syntax will not render in our build system.
Copy link
Contributor

@mjwolf mjwolf Dec 5, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a feature which was added to the Kibana documentation rendering already: elastic/kibana#223916.

There are some other integrations already using this. If it's not supported in the documentation build system, then it's something we'll have to address somehow.
Copy link
Contributor Author

@alaudazzi alaudazzi Dec 9, 2025 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tracked in https://github.com/elastic/docs-content-internal/issues/573 and https://github.com/elastic/integration-experience/issues/518
packages/zeek/docs/README.md

### Agent-based deployment

Elastic Agent must be installed on the host where your Zeek logs are generated. For more details, check the Elastic Agent [installation instructions](docs-content://reference/fleet/install-elastic-agents.md). You can install only one Elastic Agent per host.
Copy link
Member

@bmorelli25 bmorelli25 Dec 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is an internal link that will not work in Kibana.
Copy link
Contributor Author

@alaudazzi alaudazzi Dec 9, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tracked in elastic/kibana#245571
@botelastic
Copy link

botelastic bot commented Jan 8, 2026

Hi! We just realized that we haven't looked into this PR in a while. We're sorry! We're labeling this issue as Stale to make it hit our filters and make sure we get back to it as soon as possible. In the meantime, it'd be extremely helpful if you could take a look at it as well and confirm its relevance. A simple comment with a nice emoji will be enough :+1. Thank you for your contribution!
@botelastic botelastic bot added the Stalled label Jan 8, 2026
@mjwolf mjwolf closed this Feb 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. Integration:zeek Zeek Stalled Team:Integration-Experience Security Integrations Integration Experience [elastic/integration-experience]

5 participants

@alaudazzi @elasticmachine @mjwolf @bmorelli25 @andrewkroh