Cherry-pick #21388 to 7.x: [Filebeat] Add field limit check for AWS Cloudtrail flattened fields#21431
Conversation
) add 32k length check for - aws.cloudtrail.flattened.request_parameters - aws.cloudtrail.flattened.response_elements - aws.cloudtrail.flattened.additional_eventdata - aws.cloudtrail.flattened.service_event_details Closes elastic#21382 (cherry picked from commit eae9f5c)
|
Pinging @elastic/siem (Team:SIEM) |
💔 Tests FailedExpand to view the summary
Build stats
Test stats 🧪
Test errorsExpand to view the tests failures
Steps errorsExpand to view the steps failures
Log outputExpand to view the last 100 lines of log output
|
Cherry-pick of PR #21388 to 7.x branch. Original message:
What does this PR do?
Adds a 32k length check for:
Why is it important?
Elasticsearch will fail to index the document if a flattened field is
over 32k in length.
Checklist
CHANGELOG.next.asciidocorCHANGELOG-developer.next.asciidoc.How to test this PR locally
Related issues