Skip to content

Initial structure - #1

Merged
andresrc merged 1 commit into
elastic:masterfrom
andresrc:initial-structure
Aug 14, 2019
Merged

andresrc merged 1 commit into
elastic:masterfrom
andresrc:initial-structure

Conversation

@andresrc

Copy link
Copy Markdown
Contributor

Just adding placeholders for the initial folders.

@andresrc
andresrc requested review from exekias and ruflin August 13, 2019 11:33

@ruflin ruflin left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

@elasticmachine

Copy link
Copy Markdown

Package ti_cif3 - 0.4.1 containing this change is available at https://epr.elastic.co/search?package=ti_cif3

@elasticmachine

Copy link
Copy Markdown

Package ti_otx - 1.7.1 containing this change is available at https://epr.elastic.co/search?package=ti_otx

@elasticmachine

Copy link
Copy Markdown

Package ti_threatq - 1.8.1 containing this change is available at https://epr.elastic.co/search?package=ti_threatq

@elasticmachine

Copy link
Copy Markdown

Package okta - 1.15.1 containing this change is available at https://epr.elastic.co/search?package=okta

@elasticmachine

Copy link
Copy Markdown

Package redis - 1.9.1 containing this change is available at https://epr.elastic.co/search?package=redis

@elasticmachine

Copy link
Copy Markdown

Package windows - 1.22.0 containing this change is available at https://epr.elastic.co/search?package=windows

@elasticmachine

Copy link
Copy Markdown

Package hashicorp_vault - 1.13.0 containing this change is available at https://epr.elastic.co/search?package=hashicorp_vault

@elasticmachine

Copy link
Copy Markdown

Package o365 - 1.24.1 containing this change is available at https://epr.elastic.co/search?package=o365

@elasticmachine

Copy link
Copy Markdown

Package nats - 1.3.3 containing this change is available at https://epr.elastic.co/search?package=nats

tommyers-elastic pushed a commit that referenced this pull request Oct 18, 2023
* [activemq]: migration with yq

* [airflow]: migration with yq

* [apache]: migration with yq

* [apache_spark]: migration with yq

* [cassandra]: migration with yq

* [cockroachdb]: migration with yq

* [couchbase]: migration with yq

* [couchdb]: migration with yq

* [etcd]: migration with yq

* [activemq] - removed dotted YAML keys from manifest

The format_version in the package manifest changed from 1.0.0 to 3.0.0. Removed
dotted YAML keys from package manifest. Added 'owner.type: elastic' to package
manifest.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -v -format-version=3.0.0 -skip-format -fix-dotted-yaml-keys -add-owner-type packages/activemq

* [apache_spark] - removed dotted YAML keys from manifest

The format_version in the package manifest changed from 1.0.0 to 3.0.0. Removed
dotted YAML keys from package manifest. Added 'owner.type: elastic' to package
manifest.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -v -format-version=3.0.0 -skip-format -fix-dotted-yaml-keys -add-owner-type packages/apache_spark

* [apache_tomcat] - removed dotted YAML keys from manifest

The format_version in the package manifest changed from 2.3.0 to 3.0.0. Removed
dotted YAML keys from package manifest. Added 'owner.type: elastic' to package
manifest.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -v -format-version=3.0.0 -skip-format -fix-dotted-yaml-keys -add-owner-type packages/apache_tomcat

* [cassandra] - removed dotted YAML keys from manifest

The format_version in the package manifest changed from 1.0.0 to 3.0.0. Removed
dotted YAML keys from package manifest. Added 'owner.type: elastic' to package
manifest.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -v -format-version=3.0.0 -skip-format -fix-dotted-yaml-keys -add-owner-type packages/cassandra

* [couchdb] - removed dotted YAML keys from manifest

The format_version in the package manifest changed from 1.0.0 to 3.0.0. Removed
dotted YAML keys from package manifest. Added 'owner.type: elastic' to package
manifest.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -v -format-version=3.0.0 -skip-format -fix-dotted-yaml-keys -add-owner-type packages/couchdb

* [airflow] - removed dotted YAML keys from manifest

The format_version in the package manifest changed from 1.0.0 to 3.0.0. Removed
dotted YAML keys from package manifest. Added 'owner.type: elastic' to package
manifest.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -v -format-version=3.0.0 -skip-format -fix-dotted-yaml-keys -add-owner-type packages/airflow

* [azure_functions] - removed dotted YAML keys from manifest

The format_version in the package manifest changed from 2.5.1 to 3.0.0. Removed
dotted YAML keys from package manifest. Added 'owner.type: elastic' to package
manifest.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -v -format-version=3.0.0 -skip-format -fix-dotted-yaml-keys -add-owner-type packages/azure_functions

* [ceph] - removed dotted YAML keys from manifest

The format_version in the package manifest changed from 2.0.0 to 3.0.0. Removed
dotted YAML keys from package manifest. Added 'owner.type: elastic' to package
manifest.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -v -format-version=3.0.0 -skip-format -fix-dotted-yaml-keys -add-owner-type packages/ceph

* [cockroachdb] - removed dotted YAML keys from manifest

The format_version in the package manifest changed from 1.0.0 to 3.0.0. Removed
dotted YAML keys from package manifest. Added 'owner.type: elastic' to package
manifest.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -v -format-version=3.0.0 -skip-format -fix-dotted-yaml-keys -add-owner-type packages/cockroachdb

* [coredns] - removed dotted YAML keys from manifest

The format_version in the package manifest changed from 2.0.0 to 3.0.0. Removed
dotted YAML keys from package manifest. Added 'owner.type: elastic' to package
manifest.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -v -format-version=3.0.0 -skip-format -fix-dotted-yaml-keys -add-owner-type packages/coredns

* [couchbase]: migration with yq

* [couchbase] - removed dotted YAML keys from manifest

The format_version in the package manifest changed from 1.0.0 to 3.0.0. Removed
dotted YAML keys from package manifest. Added 'owner.type: elastic' to package
manifest.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -v -format-version=3.0.0 -skip-format -fix-dotted-yaml-keys -add-owner-type packages/couchbase

* [etcd] - removed dotted YAML keys from manifest

The format_version in the package manifest changed from 1.0.0 to 3.0.0. Removed
dotted YAML keys from package manifest. Added 'owner.type: elastic' to package
manifest.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -v -format-version=3.0.0 -skip-format -fix-dotted-yaml-keys -add-owner-type packages/etcd

* Add validation.yml

* Set correct PR number in changelog

* Revert "[apache]: migration with yq"

This reverts commit 1ea1e883119b54df303d4fc14c9bf4e2e270d32d.

* [apache_spark]: normalize fields

* [cassandra]: normalize fields

* [apache_spark]: fix formatting to make ci happy

* [cassandra]: fix formatting to make ci happy

* Format packages and quote fields where necessary

* [couchbase]: s/metrics_type/metric_type

* [airflow]: remove duplicates from agent.yml instead of ecs.yml

* [cockroachdb]: remove duplicates from agent.yml instead of ecs.yml

* revert changes for packages for which v3 migration failed

* Format packages and quote fields where necessary

* Fix inconsistency w/ elastic-build

* quote fields where necessary

* Move container.labels to ecs.yml

* Change type from object to unsinged_long

* [ceph]: Explicit mapping for state.count and state.state_name

* [apache_spark]: migration with yq

* [apache_spark]: pass elastic-packge test static

* [apache_spark]: format

* [apache_spark]: format

* Make event.type's value formatting consistent

* Change type from nested to group

* Change type from unsigned_long to long

* Quote index.mapping.dimension_fields.limit to avoid getting changed by ep format

* Revert "Quote index.mapping.dimension_fields.limit to avoid getting changed by ep format"

This reverts commit 5ca725b.
@elasticmachine

Copy link
Copy Markdown

Package sample - 999.999.999-beta-1699365663480 containing this change is available at https://epr.elastic.co/search?package=sample

@elasticmachine

Copy link
Copy Markdown

Package crowdstrike - 1.28.3 containing this change is available at https://epr.elastic.co/search?package=crowdstrike

@elasticmachine

Copy link
Copy Markdown

Package ti_crowdstrike - 0.3.0 containing this change is available at https://epr.elastic.co/search?package=ti_crowdstrike

@elasticmachine

Copy link
Copy Markdown

Package ti_threatconnect - 0.4.0 containing this change is available at https://epr.elastic.co/search?package=ti_threatconnect

@elasticmachine

Copy link
Copy Markdown

Package mysql - 1.24.0 containing this change is available at https://epr.elastic.co/search?package=mysql

stefans-elastic added a commit to stefans-elastic/integrations that referenced this pull request Sep 15, 2026
…urce_id presence

All 8 grok processors in the canonical azure-shared-pipeline.yml now
carry an `ctx.azure?.resource_id != null` guard. Previously, grok elastic#1 had
no guard at all, and groks elastic#2–8 were only guarded on `subscription_id ==
null` — which is always true when the field is absent. For Entra ID log
categories (provisioning, auditlogs) that don't emit ARM resource IDs,
all 8 groks executed and failed on every event, causing ~35–37% EPS
regressions observed in the benchmark report on PR elastic#21261.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants