Skip to content

[aws_waf_otel] Content pack of EDOT Cloud Forwarder for AWS - Web Application Firewall (WAF) Logs#15964

Merged
ishleenk17 merged 7 commits intoelastic:mainfrom
mykola-elastic:aws_waf_otel
Jan 27, 2026
Merged

[aws_waf_otel] Content pack of EDOT Cloud Forwarder for AWS - Web Application Firewall (WAF) Logs#15964
ishleenk17 merged 7 commits intoelastic:mainfrom
mykola-elastic:aws_waf_otel

Conversation

@mykola-elastic
Copy link
Copy Markdown
Contributor

@mykola-elastic mykola-elastic commented Nov 13, 2025 •
edited
Loading

Content pack for EDOT Cloud Forwarder for AWS - WAF Logs - Dashboard

Proposed commit message

See title.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Screenshots

keepedot-cloud-forwarder-dataset-routing-c832b4 kb us-central1 gcp staging elastic cloud_app_dashboards (1)

@mykola-elastic mykola-elastic self-assigned this Nov 13, 2025
@mykola-elastic mykola-elastic added documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. dashboard Relates to a Kibana dashboard bug, enhancement, or modification. New Integration Issue or pull request for creating a new integration package. Team:Obs-InfraObs Observability Infrastructure Monitoring team [elastic/obs-infraobs-integrations] Integration:aws_waf_otel AWS WAF Logs OpenTelemetry Assets labels Nov 13, 2025
@elastic elastic deleted a comment from elasticmachine Nov 13, 2025
@andrewkroh andrewkroh removed the dashboard Relates to a Kibana dashboard bug, enhancement, or modification. label Nov 13, 2025
@mykola-elastic mykola-elastic marked this pull request as ready for review November 13, 2025 14:50
@mykola-elastic mykola-elastic requested a review from a team as a code owner November 13, 2025 14:50
@mykola-elastic mykola-elastic marked this pull request as draft November 13, 2025 14:51
@mykola-elastic mykola-elastic marked this pull request as ready for review November 13, 2025 15:03
@mykola-elastic mykola-elastic changed the title [DRAFT] [aws_waf_otel] Content pack of EDOT Cloud Forwarder for AWS - Web Application Firewall (WAF) Logs [aws_waf_otel] Content pack of EDOT Cloud Forwarder for AWS - Web Application Firewall (WAF) Logs Nov 13, 2025
@mykola-elastic mykola-elastic added the dashboard Relates to a Kibana dashboard bug, enhancement, or modification. label Nov 13, 2025
@mykola-elastic
Copy link
Copy Markdown
Contributor Author

mykola-elastic commented Nov 14, 2025

References to other dashboards:

Based on this the reasonable changes could be:

  • adding a Map view
  • somehow make it look fancier (I don't know yet)

cc @daniela-elastic

@ShourieG ShourieG mentioned this pull request Nov 14, 2025
Closed
@mykola-elastic mykola-elastic requested a review from a team November 14, 2025 10:34
@mykola-elastic
Copy link
Copy Markdown
Contributor Author

mykola-elastic commented Nov 14, 2025

Another one: Table vs Bar

Screenshot 2025-11-14 at 12 40 52

@mykola-elastic
Copy link
Copy Markdown
Contributor Author

mykola-elastic commented Nov 17, 2025 •
edited
Loading

@ShourieG could you please add your thoughts/review on this PR?

@mykola-elastic
Copy link
Copy Markdown
Contributor Author

mykola-elastic commented Nov 17, 2025

We can add something like this (Map). If we do this I'll reshuffle panels a little

keepedot-cloud-forwarder-dataset-routing-c832b4 kb us-central1 gcp staging elastic cloud_app_dashboards (1)

alaudazzi
alaudazzi approved these changes Nov 18, 2025
View reviewed changes
Copy link
Copy Markdown
Member

@alaudazzi alaudazzi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Left a minor suggestion for a more accessible term. Otherwise, LGTM.

@mykola-elastic @alaudazzi
Update packages/aws_waf_otel/docs/README.md
ae36480 
Co-authored-by: Arianna Laudazzi <46651782+alaudazzi@users.noreply.github.com>
stefans-elastic
stefans-elastic approved these changes Nov 18, 2025
View reviewed changes
Copy link
Copy Markdown
Contributor

@stefans-elastic stefans-elastic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

ShourieG
ShourieG approved these changes Dec 1, 2025
View reviewed changes
Copy link
Copy Markdown
Contributor

@ShourieG ShourieG left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM from my end

@ishleenk17
Copy link
Copy Markdown
Member

ishleenk17 commented Dec 10, 2025

There is no mention of the word OpenTelemetry in the dashbaord title. Just from the look of the dashbaord one might not know that this is for OTEL data. Can we add that. @mykola-elastic

@mykola-elastic
Copy link
Copy Markdown
Contributor Author

mykola-elastic commented Dec 10, 2025 •
edited
Loading

There is no mention of the word OpenTelemetry in the dashbaord title. Just from the look of the dashbaord one might not know that this is for OTEL data. Can we add that.

The dashboard title is not shown on the screenshot, the title is "[AWS WAF OTEL] AWS Web Application Firewall Logs Overview"

The Markdown panel header indeed doesn't contain the word OpenTelemetry, though it is consistent with all the other AWS OTEL CPs, header examples: "AWS VPC Flow Logs Overview", "AWS CloudTrail Logs Overview", "AWS ELB"

@elasticmachine
Copy link
Copy Markdown

elasticmachine commented Dec 12, 2025

💚 Build Succeeded

History

cc @mykola-elastic

@mykola-elastic mykola-elastic mentioned this pull request Dec 12, 2025
Closed
@botelastic
Copy link
Copy Markdown

botelastic bot commented Jan 11, 2026

Hi! We just realized that we haven't looked into this PR in a while. We're sorry! We're labeling this issue as Stale to make it hit our filters and make sure we get back to it as soon as possible. In the meantime, it'd be extremely helpful if you could take a look at it as well and confirm its relevance. A simple comment with a nice emoji will be enough :+1. Thank you for your contribution!

@botelastic botelastic bot added the Stalled label Jan 11, 2026
@ishleenk17
Copy link
Copy Markdown
Member

ishleenk17 commented Jan 20, 2026

Still relevant

@botelastic botelastic bot removed the Stalled label Jan 20, 2026
@MichaelKatsoulis
Copy link
Copy Markdown
Contributor

MichaelKatsoulis commented Jan 20, 2026 •
edited
Loading

@ishleenk17 and @mykola-elastic I have tested this today and looks perfect. Now that we have a stable version with streaming in edot-cloud-forwarder we can come back to this. We will update the docs to reference AWS WAF in tech preview and in Q1 the goal is for aws waf to be GA.

Screenshot 2026-01-20 at 3 26 10 PM (2)

@ishleenk17
Copy link
Copy Markdown
Member

ishleenk17 commented Jan 20, 2026

@MichaelKatsoulis : Thanks. Once we have this documented in tech preview, we will merge it.

@MichaelKatsoulis
Copy link
Copy Markdown
Contributor

MichaelKatsoulis commented Jan 26, 2026

@ishleenk17 , @mykola-elastic documentation is updated with WAF. https://www.elastic.co/docs/reference/opentelemetry/edot-cloud-forwarder/aws

@mykola-elastic
Copy link
Copy Markdown
Contributor Author

mykola-elastic commented Jan 26, 2026

@MichaelKatsoulis Thanks!
I guess we can merge it now
cc @lalit-satapathy (we need your approval)

@ishleenk17
Copy link
Copy Markdown
Member

ishleenk17 commented Jan 27, 2026

@MichaelKatsoulis Thanks! I guess we can merge it now cc @lalit-satapathy (we need your approval)

Great. Approving the PR from integrations-triaging team.

@ishleenk17 ishleenk17 merged commit 902bc9d into elastic:main Jan 27, 2026
8 checks passed
@elastic-vault-github-plugin-prod
Copy link
Copy Markdown

elastic-vault-github-plugin-prod bot commented Jan 27, 2026

Package aws_waf_otel - 0.1.0 containing this change is available at https://epr.elastic.co/package/aws_waf_otel/0.1.0/

jakubgalecki0 pushed a commit to jakubgalecki0/integrations that referenced this pull request Feb 19, 2026
@mykola-elastic @alaudazzi @jakubgalecki0
[aws_waf_otel] Content pack of EDOT Cloud Forwarder for AWS - Web App…
447cef7 
…lication Firewall (WAF) Logs (elastic#15964)

* Initial commit: aws_waf_otel

* add pr number

* add CODEOWNERS entry

* add dashboard

* add README

* Update packages/aws_waf_otel/docs/README.md

Co-authored-by: Arianna Laudazzi <46651782+alaudazzi@users.noreply.github.com>

---------

Co-authored-by: Arianna Laudazzi <46651782+alaudazzi@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@MichaelKatsoulis MichaelKatsoulis MichaelKatsoulis approved these changes

@alaudazzi alaudazzi alaudazzi approved these changes

@ishleenk17 ishleenk17 ishleenk17 approved these changes

@ShourieG ShourieG ShourieG approved these changes

@stefans-elastic stefans-elastic stefans-elastic approved these changes

@daniela-elastic daniela-elastic Awaiting requested review from daniela-elastic

@gpop63 gpop63 Awaiting requested review from gpop63

Assignees

@mykola-elastic mykola-elastic

Labels

dashboard Relates to a Kibana dashboard bug, enhancement, or modification. documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. Integration:aws_waf_otel AWS WAF Logs OpenTelemetry Assets New Integration Issue or pull request for creating a new integration package. Team:Obs-InfraObs Observability Infrastructure Monitoring team [elastic/obs-infraobs-integrations]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

8 participants

@mykola-elastic @ishleenk17 @elasticmachine @MichaelKatsoulis @alaudazzi @ShourieG @stefans-elastic @andrewkroh