Skip to content

[cisco_ise] Correct parsing of kv pairs with commas - #19562

Merged
mjwolf merged 4 commits into
elastic:mainfrom
mjwolf:cisco_ise_kv_pair_parsing
Jun 19, 2026
Merged

[cisco_ise] Correct parsing of kv pairs with commas#19562
mjwolf merged 4 commits into
elastic:mainfrom
mjwolf:cisco_ise_kv_pair_parsing

Conversation

@mjwolf

@mjwolf mjwolf commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

Proposed commit message

Fixed KV pair parsing in 16 Cisco ISE ingest pipelines to handle values containing commas, by adding a positive lookahead pattern to correctly determine the end of the value field.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

New pipeline test case has been added which exercises the case where kv value contains a comma.

Fixed KV pair parsing in 16 Cisco ISE ingest pipelines to handle values containing commas, by adding a look-ahead pattern to determine if the comma is part of the value field or delimiter of the value.
@mjwolf mjwolf self-assigned this Jun 16, 2026
@mjwolf
mjwolf requested a review from a team as a code owner June 16, 2026 22:57
@mjwolf mjwolf added Integration:cisco_ise Cisco ISE bugfix Pull request that fixes a bug issue Team:Integration-Experience Security Integrations Integration Experience [elastic/integration-experience] labels Jun 16, 2026
@infra-vault-gh-plugin-prod

Copy link
Copy Markdown

Pinging @elastic/integration-experience (Team:Integration-Experience)

@github-actions

Copy link
Copy Markdown
Contributor

✅ Elastic Docs Style Checker (Vale)

No issues found on modified lines!


The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

@elastic-vault-github-plugin-prod

Copy link
Copy Markdown
Contributor

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@andrewkroh andrewkroh added the documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. label Jun 17, 2026
@elastic-vault-github-plugin-prod

Copy link
Copy Markdown
Contributor

✅ All changelog entries have the correct PR link.

@elasticmachine

Copy link
Copy Markdown

��� Build Succeeded

History

cc @mjwolf

@mjwolf
mjwolf enabled auto-merge (squash) June 18, 2026 19:28
@vera-review-bot

Copy link
Copy Markdown

👀 I have started reviewing the PR

@vera-review-bot

Copy link
Copy Markdown

Vera Review Bot

Review completed with no findings.

Verdict: APPROVED


AI-generated review status. Verify suggestions before applying.

@mjwolf
mjwolf merged commit 459592e into elastic:main Jun 19, 2026
10 checks passed
@elastic-vault-github-plugin-prod

Copy link
Copy Markdown
Contributor

Package cisco_ise - 1.32.7 containing this change is available at https://epr.elastic.co/package/cisco_ise/1.32.7/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bugfix Pull request that fixes a bug issue documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. Integration:cisco_ise Cisco ISE Team:Integration-Experience Security Integrations Integration Experience [elastic/integration-experience]

4 participants