Skip to content

Support new Azure audit logs and signin logs - #2682

Merged
kaiyan-sheng merged 8 commits into
elastic:mainfrom
kaiyan-sheng:test_with_sample_logs
Feb 17, 2022
Merged

Support new Azure audit logs and signin logs#2682
kaiyan-sheng merged 8 commits into
elastic:mainfrom
kaiyan-sheng:test_with_sample_logs

Conversation

@kaiyan-sheng

@kaiyan-sheng kaiyan-sheng commented Feb 11, 2022

Copy link
Copy Markdown

What does this PR do?

This PR is to add support for the new Azure audit logs and signin logs. Sample logs are provided by the Azure team and added into /_dev/test/pipeline for both auditlogs data stream and signinlogs data stream in Azure package.

This PR added two fields for audit logs and 4 fields for signin logs:

  • azure.auditlogs.level
  • azure.auditlogs.properties.authentication_protocol
  • azure.signinlogs.properties.authentication_protocol
  • azure.signinlogs.properties.incoming_token_type
  • azure.signinlogs.properties.service_principal_credential_key_id
  • azure.signinlogs.properties.unique_token_identifier

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
@kaiyan-sheng kaiyan-sheng self-assigned this Feb 11, 2022
@elasticmachine

elasticmachine commented Feb 11, 2022

Copy link
Copy Markdown

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS
Pipeline View Test View Changes Artifacts preview preview

Expand to view the summary

Build stats

  • Start Time: 2022-02-15T19:21:29.873+0000

  • Duration: 19 min 3 sec

Test stats 🧪

Test Results
Failed 0
Passed 84
Skipped 0
Total 84

🤖 GitHub comments

To re-run your PR in the CI, just comment with:

  • /test : Re-trigger the build.
@andrewkroh andrewkroh added the Integration:azure Azure Logs label Feb 11, 2022
Comment thread packages/azure/data_stream/signinlogs/fields/fields.yml Outdated
Comment thread packages/azure/data_stream/signinlogs/fields/fields.yml
Comment thread packages/azure/docs/README.md Outdated
@kaiyan-sheng
kaiyan-sheng merged commit 44b728e into elastic:main Feb 17, 2022
@kaiyan-sheng
kaiyan-sheng deleted the test_with_sample_logs branch February 17, 2022 16:38
orestisfl pushed a commit to orestisfl/integrations that referenced this pull request May 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

4 participants