File tree Expand file tree Collapse file tree
packages/azure/data_stream
events/elasticsearch/ingest_pipeline
signinlogs/elasticsearch/ingest_pipeline Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -44,10 +44,11 @@ processors:
4444 if : ' ctx.tmp_json?.category == null'
4545 ignore_missing : true
4646 description : ' Rename the invalid `Category` field to `category` to apply the correct routing rules.'
47- # Unfortunately, some Azure services produce logs with `CategoryValue` field
48- # instead of `Category` field.
47+ # Unfortunately, some Azure services generate logs with
48+ # `CategoryValue` field instead of `Category` field.
4949 #
50- # We need to rename it to `category` to apply the correct routing rules.
50+ # We need to rename `CategoryValue` as `category` to
51+ # apply the correct routing rules.
5152 #
5253 # Refs;
5354 # - https://github.com/elastic/integrations/issues/15083
Original file line number Diff line number Diff line change @@ -46,6 +46,14 @@ processors:
4646 - drop :
4747 description : Drop non-SignInLogs.
4848 if : ctx.azure?.signinlogs?.category == null || !ctx.azure.signinlogs.category.endsWith('SignInLogs')
49+ # Unfortunately, some Azure services generate logs with
50+ # `created_date_time` field instead of `time` field.
51+ #
52+ # We need to rename `created_date_time` as `time` to
53+ # apply the correct timestamp processing.
54+ #
55+ # Refs;
56+ # - https://github.com/elastic/integrations/issues/15083
4957 - rename :
5058 field : azure.signinlogs.created_date_time
5159 target_field : azure.signinlogs.time
You can’t perform that action at this time.
0 commit comments