Filebeat tests: Restore @timestamp field validation#29772
Filebeat tests: Restore @timestamp field validation#29772adriansr merged 4 commits intoelastic:masterfrom
@timestamp field validation#29772Conversation
This restores the `@timestamp` field in Filebeat's module tests, so that it is properly validated.
This fileset is failing to extract the correct timestamp from the logs. This will be fixed in a separate PR.
|
This pull request does not have a backport label. Could you fix it @adriansr? 🙏
NOTE: |
@timestamp field validation@timestamp field validation
💔 Build Failed
Expand to view the summary
Build stats
Test stats 🧪
Steps errors
Expand to view the steps failures
|
|
Pinging @elastic/integrations (Team:Integrations) |
|
CI failing under Windows recently due to python venv issues. Merging anyway. |
This restores the `@timestamp` field in Filebeat's module tests, so that it is properly validated. Temporarily disable timestamp validation in ibmmq module (cherry picked from commit bcb83e8)
This restores the `@timestamp` field in Filebeat's module tests, so that it is properly validated. Temporarily disable timestamp validation in ibmmq module (cherry picked from commit bcb83e8) Co-authored-by: Adrian Serrano <adrisr83@gmail.com>
…b-for-macos * upstream/master: (172 commits) [Elastic Agent] Fix issue with ensureServiceToken. (elastic#29800) [Winlogbeat] Add provider name to Security routing pipeline check (elastic#29781) Add summary to journeys which don't emit journey:end (early node subprocess exits) (elastic#29606) Prepare 8.0.0-rc1 changelog (elastic#29795) (elastic#29806) Change docker image from CentOS 7 to Ubuntu 20.04 (elastic#29681) libbeat/processors/add_process_metadata: implement a process cache eviction policy (elastic#29717) [Automation] Update elastic stack version to 8.1.0-7004acda for testing (elastic#29783) Missing changelog entry for elastic#29773 (elastic#29791) Add a readme for k8s autodiscover provider (elastic#28213) Remove overriding of index pattern on the Kubernetes overview dashboard (elastic#29676) jjbb: remove obsoleted branches (<7.16) (elastic#29707) Add k8s metadata in state_cronjob metricset (elastic#29572) ibmmq: Fix timestamp parsing (elastic#29773) Do not add date to index if `@meta.index` is set (elastic#29775) ci: uses aliases for the branches (elastic#29706) Filebeat tests: Restore `@timestamp` field validation (elastic#29772) Forward port 7.16.3 changelog to master (elastic#29777) auditd: Store program arguments in process.args array (elastic#29601) System/socket: Support kernel_clone() replacement for _do_fork() (elastic#29744) Do not mention removal if version is not specified in `cfgwarn` messages (elastic#29727) ...
What does this PR do?
Restores validation for
@timestampfield in Filebeat's modules tests. This includes re-generating the expected files as they have been out of date for a while, and some of them had their@timestampfield lost since they've been updated.Why is it important?
Since #28450,
@timestampvalidation was disabled for Filebeat modules. Restoring it ensures we catch bugs related to extracting the correct timestamp from logs.Note: This temporarily disables validation for
ibmmq.errorlog, as there's a bug parsing timestamps in that fileset. This will be fixed in a separate PR. (here #29773)Checklist
[ ] I have made corresponding changes to the documentation[ ] I have made corresponding change to the default configuration files[ ] I have added an entry inCHANGELOG.next.asciidocorCHANGELOG-developer.next.asciidoc.