-
Notifications
You must be signed in to change notification settings - Fork 550
Closed
Labels
Integration:githubGitHubGitHubTeam:Security-Service IntegrationsSecurity Service Integrations team [elastic/security-service-integrations]Security Service Integrations team [elastic/security-service-integrations]mapping/pipeline issue
Description
Elastic Agent Version : 8.6.2
Fleet Version: 8.6.2
Elasticsearch Version: 8.6.2
GitHub package version: 1.9.0
Enabled Inputs: github.audit
Hello Team,
Please note that after enabling the integration for our GitHub orgs, we are seeing numerous amounts of the below errors, despite the fact the data is being written into the logs-github.audit-default datastream , but we are afraid that some data is being lost or skipped due to it.
Can you please have a look and advice?
ERRORS
{"log.level":"error","@timestamp":"2023-04-06T11:30:18.452Z","message":"unable to unmarshal first_response.body: json: cannot unmarshal array into Go value of type map[string]interface {}","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"httpjson-421f4340-ce3f-11ed-9d71-9762d166b402","type":"httpjson"},"log":{"source":"httpjson-421f4340-ce3f-11ed-9d71-9762d166b402"},"ecs.version":"1.6.0","id":"httpjson-github.audit-ea39edd5-bffa-4999-8e06-ba383dbf991d","service.name":"filebeat","input_source":"https://api.github.com/orgs/xxxx/audit-log","input_url":"https{"log.level":"error","@timestamp":"2023-04-06T11:30:18.453Z","message":"error processing response: template: :1:39: executing \"\" at <.last_response.header.Link>: map has no entry for key \"Link\"","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"httpjson-421f4340-ce3f-11ed-9d71-9762d166b402","type":"httpjson"},"log":{"source":"httpjson-421f4340-ce3f-11ed-9d71-9762d166b402"},"id":"httpjson-github.audit-ea39edd5-bffa-4999-8e06-ba383dbf991d","input_source":"https://api.github.com/orgs/xxxx/audit-log","input_url":"https://api.github.com/orgs/xxxx/audit-log","ecs.version":"1.6.0","service.name":"filebeat","log.logger":"input.httpjson-cursor","log.origin":{"file.line":504,"file.name":"httpjson/request.go"},"ecs.version":"1.6.0"}
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
Integration:githubGitHubGitHubTeam:Security-Service IntegrationsSecurity Service Integrations team [elastic/security-service-integrations]Security Service Integrations team [elastic/security-service-integrations]mapping/pipeline issue