Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions dev/import-beats/datasources.go
Original file line number Diff line number Diff line change
Expand Up @@ -181,6 +181,7 @@ func toDatasourceInputDescription(moduleTitle, packageType string, datasets []st
func adjustDatasetNamesForInputDescription(names []string) []string {
var adjusted []string
for _, name := range names {
// TODO: need to investigate
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@mtojek My suspicion is that I don't need to change anything here as the name here will stay the same on the module side.

if name == "log" {
adjusted = append(adjusted, "application")
continue
Expand Down
2 changes: 1 addition & 1 deletion dev/import-beats/streams.go
Original file line number Diff line number Diff line change
Expand Up @@ -92,7 +92,7 @@ func createLogStreams(modulePath, moduleTitle, datasetName string) ([]util.Strea
for _, inputType := range root.inputTypes() {
aType := inputType
if inputType == "log" {
aType = "logs"
aType = "logfile"
}
targetFileName := inputType + ".yml.hbs"

Expand Down
1 change: 1 addition & 0 deletions dev/import-beats/streams_config_parser.go
Original file line number Diff line number Diff line change
Expand Up @@ -90,6 +90,7 @@ func inputTypesForListNode(listNode *parse.ListNode) []string {
}

func (scp *streamConfigParsed) configForInput(inputType string) []byte {
// TODO: need to investigate
if inputType == "log" {
inputType = "file"
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@mtojek Do you know a package where this is used? Not sure I can follow the mapping from log to file

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I might have tried with o365. I remember there was a weird construct:

{{ else if eq .input "file" }}

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Does it mean I can ignore it?

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think you could try render the o365 package and judge the output (stream config).

}
Expand Down
2 changes: 1 addition & 1 deletion packages/aws/dataset/cloudtrail/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
title: AWS CloudTrail logs
release: beta
type: logs
type: logfile
streams:
- input: s3
template_path: s3.yml.hbs
Expand Down
2 changes: 1 addition & 1 deletion packages/aws/dataset/cloudwatch_logs/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
title: AWS CloudWatch logs
release: beta
type: logs
type: logfile
streams:
- input: s3
template_path: s3.yml.hbs
Expand Down
2 changes: 1 addition & 1 deletion packages/aws/dataset/ec2_logs/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
title: AWS EC2 logs
release: beta
type: logs
type: logfile
streams:
- input: s3
template_path: s3.yml.hbs
Expand Down
2 changes: 1 addition & 1 deletion packages/aws/dataset/elb_logs/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
title: AWS ELB logs
release: beta
type: logs
type: logfile
streams:
- input: s3
template_path: s3.yml.hbs
Expand Down
2 changes: 1 addition & 1 deletion packages/aws/dataset/s3access/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
title: AWS s3access logs
release: beta
type: logs
type: logfile
streams:
- input: s3
template_path: s3.yml.hbs
Expand Down
2 changes: 1 addition & 1 deletion packages/aws/dataset/vpcflow/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
title: AWS vpcflow logs
release: beta
type: logs
type: logfile
streams:
- input: s3
template_path: s3.yml.hbs
Expand Down
2 changes: 1 addition & 1 deletion packages/cisco/dataset/asa/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
title: Cisco ASA logs
release: beta
type: logs
type: logfile
streams:
- input: udp
title: Cisco ASA logs
Expand Down
2 changes: 1 addition & 1 deletion packages/cisco/dataset/ftd/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
title: Cisco FTD logs
release: beta
type: logs
type: logfile
streams:
- input: udp
title: Cisco FTD logs
Expand Down
1 change: 1 addition & 0 deletions packages/cisco/dataset/ios/agent/stream/stream.yml.hbs
Original file line number Diff line number Diff line change
Expand Up @@ -220,6 +220,7 @@ processors:
process: function(evt) {
copyOriginalMessage.Run(evt);

// TODO: Need to investigate if we need to update things on the Beats side too
if (evt.Get("input.type") === "log") {
parseSyslogFileHeader.Run(evt);
}
Expand Down
1 change: 1 addition & 0 deletions packages/cisco/dataset/ios/agent/stream/syslog.yml.hbs
Original file line number Diff line number Diff line change
Expand Up @@ -217,6 +217,7 @@ processors:
process: function(evt) {
copyOriginalMessage.Run(evt);

// TOOD: Check in Beats to rename it
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@michalpristas this is interesting. It would be good if Beats would send up logfile instead, but that probably requires a change on the Beats side :-(

@ph WDYT?

if (evt.Get("input.type") === "log") {
parseSyslogFileHeader.Run(evt);
}
Expand Down
2 changes: 1 addition & 1 deletion packages/cisco/dataset/ios/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
title: Cisco IOS logs
release: beta
type: logs
type: logfile
streams:
- input: syslog
title: Cisco IOS logs
Expand Down
2 changes: 1 addition & 1 deletion packages/cisco/manifest.yml
Original file line number Diff line number Diff line change
Expand Up @@ -35,6 +35,6 @@ datasources:
- type: syslog
title: Collect logs from Cisco via syslog
description: Collecting logs from Cisco IOS via syslog
- type: logs
- type: logfile
title: Collect logs from Cisco via file
description: Collecting logs from Cisco ASA, FTD, and IOS via file
2 changes: 1 addition & 1 deletion packages/kafka/dataset/log/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
title: Kafka log logs
release: beta
type: logs
type: logfile
streams:
- input: logs
vars:
Expand Down
2 changes: 1 addition & 1 deletion packages/kafka/manifest.yml
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ datasources:
title: Kafka logs and metrics
description: Collect logs and metrics from Kafka brokers
inputs:
- type: logs
- type: logfile
title: Collect logs from Kafka brokers
description: Collecting Kafka log logs
- type: kafka/metrics
Expand Down
2 changes: 1 addition & 1 deletion packages/log/dataset/log/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
title: Log Dataset

type: logs
type: logfile

default: true
id: generic
Expand Down
2 changes: 1 addition & 1 deletion packages/log/manifest.yml
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ datasources:
title: Custom logs
description: Collect your custom log files.
inputs:
- type: logs
- type: logfile
title: Custom log file
description: Collect your custom log files.

Expand Down
2 changes: 1 addition & 1 deletion packages/mysql/dataset/error/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
title: MySQL error logs
type: logs
type: logfile
release: beta
streams:
- input: logs
Expand Down
2 changes: 1 addition & 1 deletion packages/mysql/dataset/slowlog/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
title: MySQL slowlog logs
type: logs
type: logfile
release: beta
streams:
- input: logs
Expand Down
2 changes: 1 addition & 1 deletion packages/mysql/manifest.yml
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ datasources:
title: MySQL logs and metrics
description: Collect logs and metrics from MySQL instances
inputs:
- type: logs
- type: logfile
title: Collect logs from MySQL hosts
description: Collecting MySQL error and slowlog logs
- type: mysql/metrics
Expand Down
2 changes: 1 addition & 1 deletion packages/netflow/dataset/log/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
title: NetFlow logs
release: beta
type: logs
type: logfile
streams:
- input: netflow
template_path: netflow.yml.hbs
Expand Down
2 changes: 1 addition & 1 deletion packages/nginx/dataset/access/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
title: Nginx access logs
type: logs
type: logfile
release: beta
streams:
- input: logs
Expand Down
2 changes: 1 addition & 1 deletion packages/nginx/dataset/error/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
title: Nginx error logs
type: logs
type: logfile
release: beta
streams:
- input: logs
Expand Down
2 changes: 1 addition & 1 deletion packages/nginx/dataset/ingress_controller/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
title: Nginx ingress_controller logs
type: logs
type: logfile
release: beta
streams:
- input: logs
Expand Down
2 changes: 1 addition & 1 deletion packages/nginx/manifest.yml
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ datasources:
title: Nginx logs and metrics
description: Collect logs and metrics from Nginx instances
inputs:
- type: logs
- type: logfile
title: Collect logs from Nginx instances
description: Collecting Nginx access, error and ingress controller logs
- type: nginx/metrics
Expand Down
2 changes: 1 addition & 1 deletion packages/redis/dataset/log/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
title: Redis application logs
type: logs
type: logfile
release: beta
streams:
- input: logs
Expand Down
2 changes: 1 addition & 1 deletion packages/redis/dataset/slowlog/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
title: Redis slow logs
type: logs
type: logfile
release: beta
streams:
- input: redis
Expand Down
2 changes: 1 addition & 1 deletion packages/redis/manifest.yml
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ datasources:
title: Redis logs and metrics
description: Collect logs and metrics from Redis instances
inputs:
- type: logs
- type: logfile
title: Collect Redis application logs
description: Collecting application logs from Redis instances
- type: redis
Expand Down
2 changes: 1 addition & 1 deletion packages/system/dataset/auth/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
title: System auth logs
release: experimental
type: logs
type: logfile
streams:
- input: logs
vars:
Expand Down
2 changes: 1 addition & 1 deletion packages/system/dataset/syslog/manifest.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
title: System syslog logs
release: experimental
type: logs
type: logfile
streams:
- input: logs
vars:
Expand Down
2 changes: 1 addition & 1 deletion packages/system/manifest.yml
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ datasources:
title: System logs and metrics
description: Collect logs and metrics from System instances
inputs:
- type: logs
- type: logfile
title: Collect logs from System instances
description: Collecting System auth and syslog logs
- type: system/metrics
Expand Down