[Azure] Improves IPv6 parsing, replaced grok filter with convert - #3411
Merged
Conversation
…h convert. Added edge test case to support IPV6 parsing check
…h convert. Added edge test case to support IPV6 parsing check
|
💚 CLA has been signed |
💚 Build Succeeded
Expand to view the summary
Build stats
Test stats 🧪
🤖 GitHub commentsTo re-run your PR in the CI, just comment with:
|
🌐 Coverage report
|
ShourieG
changed the title
efd6
reviewed
May 24, 2022
r00tu53r
reviewed
May 24, 2022
Contributor
|
In order to reference an issue or PR, instead of |
ShourieG
changed the title
…formlogs' & 'springcloudlogs' , added edge-case and faliure senario test cases
r00tu53r
reviewed
May 24, 2022
efd6
approved these changes
May 25, 2022
kaiyan-sheng
approved these changes
May 25, 2022
kaiyan-sheng
left a comment
kaiyan-sheng
left a comment
There was a problem hiding this comment.
Looks good to me! Just one nit: since we are not using the grok to parse anymore, should source.port field be removed from ecs.yml file?
…tformlogs' & 'springcloudlogs'.
orestisfl
pushed a commit
to orestisfl/integrations
that referenced
this pull request
May 15, 2026
…stic#3411) * added bug fix for issue 'azure-issues-2138' replacing grok filter with convert. Added edge test case to support IPV6 parsing check * added bug fix for issue 'azure-issues-2138' replacing grok filter with convert. Added edge test case to support IPV6 parsing check * Added change logs and upgraded azure minor version from 1.1.8 -> 1.1.9 * updated change logs and added trailing lines * removed trailing lines from test files for test-activitylogs-edgecases * [Azure] Improved IPv6 handling for 'activitylogs', 'auditlogs', 'platformlogs' & 'springcloudlogs' , added edge-case and faliure senario test cases * removed extra spaces from rename processors * removed source.port from ecs.yml of 'activitylogs', 'auditlogs', 'platformlogs' & 'springcloudlogs'. Co-authored-by: Shourie Ganguly <exdghost@Shouries-MacBook-Pro.local>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
6 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Improves IPv6 parsing
What does this PR do?
ingest pipeline.
Checklist
changelog.ymlfile.Author's Checklist
How to test this PR locally
Use elastic package to test locally by running command - elastic-package test from inside packages/azure directory
Related issues