Skip to content

[checkpoint]: fix handling of different user formats - #20183

Merged
taylor-swanson merged 6 commits into
elastic:mainfrom
taylor-swanson:fix/checkpoint-user
Jul 17, 2026
Merged

[checkpoint]: fix handling of different user formats#20183
taylor-swanson merged 6 commits into
elastic:mainfrom
taylor-swanson:fix/checkpoint-user

Conversation

@taylor-swanson

@taylor-swanson taylor-swanson commented Jul 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Proposed commit message

  • Add grok processors to better handle different formats of the user fields in checkpoint logs. Added support for full name with email, email, and name only.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
    - [ ] I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

cd packages/checkpoint
elastic-package test
@taylor-swanson
checkpoint: fix handling of different user formats
1f45021 
- Add grok processors to better handle different formattings of the user
fields in checkpoint logs. Added support for full name with email, email,
and name only.
@taylor-swanson taylor-swanson self-assigned this Jul 16, 2026
@taylor-swanson
taylor-swanson requested a review from a team as a code owner July 16, 2026 14:05
@taylor-swanson taylor-swanson added Integration:checkpoint Check Point bugfix Pull request that fixes a bug issue Team:Integration-Experience Security Integrations Integration Experience [elastic/integration-experience] labels Jul 16, 2026
@infra-vault-gh-plugin-prod

infra-vault-gh-plugin-prod Bot commented Jul 16, 2026

Copy link
Copy Markdown

Pinging @elastic/integration-experience (Team:Integration-Experience)
@taylor-swanson
taylor-swanson marked this pull request as draft July 16, 2026 14:05
@github-actions

github-actions Bot commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

✅ Elastic Docs Style Checker (Vale)

No issues found on modified lines!

The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.
@taylor-swanson
taylor-swanson marked this pull request as ready for review July 16, 2026 15:03
@andrewkroh andrewkroh added the documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. label Jul 16, 2026
Niceplace
Niceplace reviewed Jul 17, 2026
View reviewed changes
Comment thread packages/checkpoint/data_stream/firewall/elasticsearch/ingest_pipeline/default.yml Outdated
ilyannn
ilyannn reviewed Jul 17, 2026
View reviewed changes
Comment thread packages/checkpoint/data_stream/firewall/elasticsearch/ingest_pipeline/default.yml Outdated
ilyannn
ilyannn reviewed Jul 17, 2026
View reviewed changes
Comment thread packages/checkpoint/changelog.yml Outdated
ilyannn
ilyannn reviewed Jul 17, 2026
View reviewed changes
Comment thread packages/checkpoint/data_stream/firewall/elasticsearch/ingest_pipeline/default.yml Outdated
@ilyannn ilyannn added enhancement New feature or request and removed bugfix Pull request that fixes a bug issue labels Jul 17, 2026
ilyannn
ilyannn approved these changes Jul 17, 2026
View reviewed changes

@ilyannn ilyannn left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM
@elastic-vault-github-plugin-prod

elastic-vault-github-plugin-prod Bot commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

✅ All changelog entries have the correct PR link.
@mergify

mergify Bot commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

  • Queue this pull request
@vera-review-bot

vera-review-bot Bot commented Jul 17, 2026

Copy link
Copy Markdown

⚠️ @taylor-swanson I couldn't complete the review for commits 8c477d2 after several attempts. A maintainer can re-run it with @vera-review-bot review.
@elastic-vault-github-plugin-prod

elastic-vault-github-plugin-prod Bot commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport
@infra-vault-gh-plugin-prod

infra-vault-gh-plugin-prod Bot commented Jul 17, 2026

Copy link
Copy Markdown

💚 Build Succeeded

History

cc @taylor-swanson
@taylor-swanson
taylor-swanson merged commit 1d3600e into elastic:main Jul 17, 2026
12 checks passed
@taylor-swanson
taylor-swanson deleted the fix/checkpoint-user branch July 17, 2026 15:19
@elastic-vault-github-plugin-prod

elastic-vault-github-plugin-prod Bot commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

Package checkpoint - 1.48.0 containing this change is available at https://epr.elastic.co/package/checkpoint/1.48.0/
christophercutajar pushed a commit to christophercutajar/integrations that referenced this pull request Jul 21, 2026
@taylor-swanson
[checkpoint]: fix handling of different user formats (elastic#20183)
90936c0 
- Add grok processors to better handle different formattings of the user
fields in checkpoint logs. Added support for full name with email, email,
and name only.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. enhancement New feature or request Integration:checkpoint Check Point Team:Integration-Experience Security Integrations Integration Experience [elastic/integration-experience]

4 participants

@taylor-swanson @ilyannn @Niceplace @andrewkroh