[dfg]*: ensure event.kind is correctly set for pipeline errors

packages/darktrace/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.5.0"
+  changes:
+    - description: Ensure event.kind is correctly set for pipeline errors.
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/6614
 - version: "1.4.0"
   changes:
     - description: Update package to pkg-spec 2.7.0.

packages/darktrace/data_stream/ai_analyst_alert/elasticsearch/ingest_pipeline/default.yml

@@ -852,6 +852,9 @@ processors:
         }
         dropEmptyFields(ctx);
 on_failure:
+  - set:
+      field: event.kind
+      value: pipeline_error
   - append:
       field: error.message
       value: '{{{ _ingest.on_failure_message }}}'

packages/darktrace/data_stream/model_breach_alert/elasticsearch/ingest_pipeline/default.yml

@@ -1442,6 +1442,9 @@ processors:
         }
         dropEmptyFields(ctx);
 on_failure:
+  - set:
+      field: event.kind
+      value: pipeline_error
   - append:
       field: error.message
       value: '{{{ _ingest.on_failure_message }}}'

packages/darktrace/data_stream/system_status_alert/elasticsearch/ingest_pipeline/default.yml

@@ -231,6 +231,9 @@ processors:
         }
         dropEmptyFields(ctx);
 on_failure:
+  - set:
+      field: event.kind
+      value: pipeline_error
   - append:
       field: error.message
       value: '{{{ _ingest.on_failure_message }}}'

packages/darktrace/manifest.yml

@@ -1,7 +1,7 @@
 format_version: 2.7.0
 name: darktrace
 title: Darktrace
-version: "1.4.0"
+version: "1.5.0"
 description: Collect logs from Darktrace with Elastic Agent.
 type: integration
 categories:

packages/f5/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "0.16.0"
+  changes:
+    - description: Ensure event.kind is correctly set for pipeline errors.
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/6614
 - version: "0.15.0"
   changes:
     - description: Update package to ECS 8.8.0.

packages/f5/data_stream/bigipafm/elasticsearch/ingest_pipeline/default.yml

@@ -87,6 +87,9 @@ processors:
       ignore_failure: true
       ignore_missing: true
 on_failure:
+  - set:
+      field: event.kind
+      value: pipeline_error
   - append:
       field: error.message
-      value: "{{ _ingest.on_failure_message }}"
+      value: '{{{ _ingest.on_failure_message }}}'

packages/f5/data_stream/bigipapm/elasticsearch/ingest_pipeline/default.yml

@@ -87,6 +87,9 @@ processors:
       ignore_failure: true
       ignore_missing: true
 on_failure:
+  - set:
+      field: event.kind
+      value: pipeline_error
   - append:
-        field: error.message
-        value: "{{ _ingest.on_failure_message }}"
+      field: error.message
+      value: '{{{ _ingest.on_failure_message }}}'

packages/f5/manifest.yml

@@ -1,7 +1,7 @@
 format_version: 1.0.0
 name: f5
 title: F5 Logs
-version: "0.15.0"
+version: "0.16.0"
 description: Collect and parse logs from F5 devices with Elastic Agent.
 categories: ["observability", "load_balancer"]
 release: experimental

packages/f5_bigip/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.4.0"
+  changes:
+    - description: Ensure event.kind is correctly set for pipeline errors.
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/6614
 - version: "1.3.0"
   changes:
     - description: Update package to ECS 8.8.0.

packages/f5_bigip/data_stream/log/elasticsearch/ingest_pipeline/default.yml

@@ -83,6 +83,9 @@ processors:
         }
         dropEmptyFields(ctx);
 on_failure:
+  - set:
+      field: event.kind
+      value: pipeline_error
   - append:
       field: error.message
-      value: '{{ _ingest.on_failure_message }}'
+      value: '{{{ _ingest.on_failure_message }}}'

packages/f5_bigip/data_stream/log/elasticsearch/ingest_pipeline/pipeline_bigipafm.yml

@@ -384,6 +384,9 @@ processors:
       ignore_failure: true
       ignore_missing: true
 on_failure:
+  - set:
+      field: event.kind
+      value: pipeline_error
   - append:
       field: error.message
-      value: '{{ _ingest.on_failure_message }}'
+      value: '{{{ _ingest.on_failure_message }}}'

packages/f5_bigip/data_stream/log/elasticsearch/ingest_pipeline/pipeline_bigipapm.yml

@@ -190,6 +190,9 @@ processors:
       ignore_failure: true
       ignore_missing: true
 on_failure:
+  - set:
+      field: event.kind
+      value: pipeline_error
   - append:
       field: error.message
-      value: '{{ _ingest.on_failure_message }}'
+      value: '{{{ _ingest.on_failure_message }}}'

packages/f5_bigip/data_stream/log/elasticsearch/ingest_pipeline/pipeline_bigipasm.yml

@@ -550,6 +550,9 @@ processors:
       ignore_failure: true
       ignore_missing: true
 on_failure:
+  - set:
+      field: event.kind
+      value: pipeline_error
   - append:
       field: error.message
-      value: '{{ _ingest.on_failure_message }}'
+      value: '{{{ _ingest.on_failure_message }}}'

packages/f5_bigip/data_stream/log/elasticsearch/ingest_pipeline/pipeline_bigipavr.yml

@@ -1329,6 +1329,9 @@ processors:
       ignore_failure: true
       ignore_missing: true
 on_failure:
+  - set:
+      field: event.kind
+      value: pipeline_error
   - append:
       field: error.message
-      value: '{{ _ingest.on_failure_message }}'
+      value: '{{{ _ingest.on_failure_message }}}'

packages/f5_bigip/data_stream/log/elasticsearch/ingest_pipeline/pipeline_bigipltm.yml

@@ -292,6 +292,9 @@ processors:
       ignore_failure: true
       ignore_missing: true
 on_failure:
+  - set:
+      field: event.kind
+      value: pipeline_error
   - append:
       field: error.message
-      value: '{{ _ingest.on_failure_message }}'
+      value: '{{{ _ingest.on_failure_message }}}'

packages/f5_bigip/manifest.yml

@@ -1,7 +1,7 @@
 format_version: 2.7.0
 name: f5_bigip
 title: F5 BIG-IP
-version: "1.3.0"
+version: "1.4.0"
 description: Collect logs from F5 BIG-IP with Elastic Agent.
 type: integration
 categories:

packages/fim/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.8.0"
+  changes:
+    - description: Ensure event.kind is correctly set for pipeline errors.
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/6614
 - version: "1.7.0"
   changes:
     - description: Update package to ECS 8.8.0.

packages/fim/data_stream/event/elasticsearch/ingest_pipeline/default.yml

@@ -6,5 +6,8 @@ processors:
       value: '8.8.0'
 on_failure:
 - set:
+    field: event.kind
+    value: pipeline_error
+- append:
     field: error.message
-    value: '{{ _ingest.on_failure_message }}'
+    value: '{{{ _ingest.on_failure_message }}}'

packages/fim/manifest.yml

@@ -1,7 +1,7 @@
 format_version: 2.7.0
 name: fim
 title: "File Integrity Monitoring"
-version: "1.7.0"
+version: "1.8.0"
 description: "The File Integrity Monitoring integration reports filesystem changes in real time."
 type: integration
 categories:

packages/fireeye/changelog.yml

@@ -1,3 +1,8 @@
+- version: "1.13.0"
+  changes:
+    - description: Ensure event.kind is correctly set for pipeline errors.
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/6614
 - version: "1.12.0"
   changes:
     - description: Update package to pkg-spec 2.7.0.

packages/fireeye/data_stream/nx/elasticsearch/ingest_pipeline/default.yml

@@ -181,5 +181,8 @@ processors:
       ignore_missing: true
 on_failure:
   - set:
+      field: event.kind
+      value: pipeline_error
+  - append:
       field: error.message
-      value: "{{ _ingest.on_failure_message }}"
+      value: '{{{ _ingest.on_failure_message }}}'

packages/fireeye/data_stream/nx/elasticsearch/ingest_pipeline/renaming-raws.yml

@@ -460,5 +460,8 @@ processors:
       ignore_missing: true
 on_failure:
   - set:
+      field: event.kind
+      value: pipeline_error
+  - append:
       field: error.message
-      value: "{{ _ingest.on_failure_message }}"
+      value: '{{{ _ingest.on_failure_message }}}'

packages/fireeye/manifest.yml

@@ -1,7 +1,7 @@
 format_version: 2.7.0
 name: fireeye
 title: "FireEye Network Security"
-version: "1.12.0"
+version: "1.13.0"
 description: Collect logs from FireEye NX with Elastic Agent.
 type: integration
 categories:

packages/forcepoint_web/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "0.4.0"
+  changes:
+    - description: Ensure event.kind is correctly set for pipeline errors.
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/6614
 - version: "0.3.0"
   changes:
     - description: Update package to ECS 8.8.0.

packages/forcepoint_web/data_stream/logs/elasticsearch/ingest_pipeline/default.yml

@@ -352,6 +352,9 @@ processors:
         handleMap(ctx);
 
 on_failure:
+  - set:
+      field: event.kind
+      value: pipeline_error
   - append:
       field: error.message
-      value: "{{ _ingest.on_failure_message }}"
+      value: '{{{ _ingest.on_failure_message }}}'

packages/forcepoint_web/manifest.yml

@@ -1,7 +1,7 @@
 format_version: 2.7.0
 name: forcepoint_web
 title: "Forcepoint Web Security"
-version: "0.3.0"
+version: "0.4.0"
 source:
   license: "Elastic-2.0"
 description: "Forcepoint Web Security"

packages/fortinet_forticlient/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.7.0"
+  changes:
+    - description: Ensure event.kind is correctly set for pipeline errors.
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/6614
 - version: "1.6.0"
   changes:
     - description: Update package to ECS 8.8.0.

packages/fortinet_forticlient/data_stream/log/elasticsearch/ingest_pipeline/default.yml

@@ -71,6 +71,9 @@ processors:
       ignore_failure: true
       ignore_missing: true
 on_failure:
+  - set:
+      field: event.kind
+      value: pipeline_error
   - append:
       field: error.message
-      value: "{{ _ingest.on_failure_message }}"
+      value: '{{{ _ingest.on_failure_message }}}'

packages/fortinet_forticlient/manifest.yml

@@ -1,6 +1,6 @@
 name: fortinet_forticlient
 title: Fortinet FortiClient Logs
-version: "1.6.0"
+version: "1.7.0"
 description: Collect logs from Fortinet FortiClient instances with Elastic Agent.
 type: integration
 format_version: 2.7.0

packages/fortinet_fortiedr/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.8.0"
+  changes:
+    - description: Ensure event.kind is correctly set for pipeline errors.
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/6614
 - version: "1.7.0"
   changes:
     - description: Update package to ECS 8.8.0.

packages/fortinet_fortiedr/data_stream/log/elasticsearch/ingest_pipeline/default.yml

@@ -235,6 +235,9 @@ processors:
         - _temp_
       ignore_failure: true
 on_failure:
+  - set:
+      field: event.kind
+      value: pipeline_error
   - append:
       field: error.message
-      value: "{{ _ingest.on_failure_message }}"
+      value: '{{{ _ingest.on_failure_message }}}'

packages/fortinet_fortiedr/manifest.yml

@@ -1,6 +1,6 @@
 name: fortinet_fortiedr
 title: Fortinet FortiEDR Logs
-version: "1.7.0"
+version: "1.8.0"
 description: Collect logs from Fortinet FortiEDR instances with Elastic Agent.
 type: integration
 format_version: 2.7.0

packages/fortinet_fortigate/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.14.0"
+  changes:
+    - description: Ensure event.kind is correctly set for pipeline errors.
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/6614
 - version: "1.13.0"
   changes:
     - description: Update package to package-spec 2.7.0.

packages/fortinet_fortigate/data_stream/log/elasticsearch/ingest_pipeline/default.yml

@@ -571,5 +571,8 @@ processors:
       ignore_missing: true
 on_failure:
   - set:
+      field: event.kind
+      value: pipeline_error
+  - append:
       field: error.message
-      value: "{{ _ingest.on_failure_message }}"
+      value: '{{{ _ingest.on_failure_message }}}'

packages/fortinet_fortigate/data_stream/log/elasticsearch/ingest_pipeline/event.yml

@@ -261,5 +261,8 @@ processors:
       ignore_missing: true
 on_failure:
   - set:
+      field: event.kind
+      value: pipeline_error
+  - append:
       field: error.message
-      value: "{{ _ingest.on_failure_message }}"
+      value: '{{{ _ingest.on_failure_message }}}'

packages/fortinet_fortigate/data_stream/log/elasticsearch/ingest_pipeline/traffic.yml

@@ -228,5 +228,8 @@ processors:
     ignore_missing: true
 on_failure:
 - set:
+    field: event.kind
+    value: pipeline_error
+- append:
     field: error.message
-    value: '{{ _ingest.on_failure_message }}'
+    value: '{{{ _ingest.on_failure_message }}}'

packages/fortinet_fortigate/data_stream/log/elasticsearch/ingest_pipeline/utm.yml

@@ -382,5 +382,8 @@ processors:
       ignore_missing: true
 on_failure:
   - set:
+      field: event.kind
+      value: pipeline_error
+  - append:
       field: error.message
-      value: "{{ _ingest.on_failure_message }}"
+      value: '{{{ _ingest.on_failure_message }}}'

packages/fortinet_fortigate/manifest.yml

@@ -1,6 +1,6 @@
 name: fortinet_fortigate
 title: Fortinet FortiGate Firewall Logs
-version: "1.13.0"
+version: "1.14.0"
 description: Collect logs from Fortinet FortiGate firewalls with Elastic Agent.
 type: integration
 format_version: 2.7.0