Skip to content

[AWS WAF] Add dashboards for AWS Web Application Firewall data stream#16713

Merged
moxarth-rathod merged 6 commits intoelastic:mainfrom
moxarth-rathod:aws-waf-dashboard
Jan 3, 2026
Merged

[AWS WAF] Add dashboards for AWS Web Application Firewall data stream#16713
moxarth-rathod merged 6 commits intoelastic:mainfrom
moxarth-rathod:aws-waf-dashboard

Conversation

@moxarth-rathod
Copy link
Copy Markdown
Contributor

@moxarth-rathod moxarth-rathod commented Dec 29, 2025

Proposed commit message

aws: add overview dashboards for AWS Web Application Firewall data stream

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Related issues

Screenshots

aws-waf-log-overview-1

@moxarth-rathod moxarth-rathod self-assigned this Dec 29, 2025
@moxarth-rathod moxarth-rathod requested review from a team as code owners December 29, 2025 09:19
@moxarth-rathod moxarth-rathod added enhancement New feature or request Integration:aws AWS Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Team:SDE-Crest Crest developers on the Security Integrations team [elastic/sit-crest-contractors] labels Dec 29, 2025
@elasticmachine
Copy link
Copy Markdown

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

Copy link
Copy Markdown
Contributor

@chrisberkhout chrisberkhout left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you pelase put the data_stream.dataset: aws.waf filter on each panel and remove it from the top?

In the "SEI Integration Dashboard styling guide" we say:

Only use filters on visualizations panels, not dashboards.

  • When creating dashboards that are to be used with integrations, we want to filter the information we retrieve, while also allowing the end user to add its own filters.
    By adding dashboard level filters we give the end user an easy way to simply remove our used filters by mistake, since they will be using the KQL query bar at the top of the dashboard for its own filters.

    When you create a new visualization you want to add to a dashboard, it is possible to apply the filters directly on the visualization itself, which is much more hidden for the end-user.

Otherwise it looks great.

Copy link
Copy Markdown
Contributor

@chrisberkhout chrisberkhout left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The screenshot didn't get updated.

If it's tricky to get the data back in, I think it's okay to edit the image directly for a small update like this, rather than taking another screenshot. Here's a version of it with the filter removed:

aws-waf-log-overview

@moxarth-rathod
Copy link
Copy Markdown
Contributor Author

The screenshot didn't get updated.

If it's tricky to get the data back in, I think it's okay to edit the image directly for a small update like this, rather than taking another screenshot. Here's a version of it with the filter removed:

aws-waf-log-overview

My bad, I already captured the screenshot but i forgot to add it here. It's now updated, thanks 👍

Copy link
Copy Markdown
Contributor

@chrisberkhout chrisberkhout left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍 Nice one!

@moxarth-rathod moxarth-rathod enabled auto-merge (squash) January 1, 2026 05:42
@elastic-vault-github-plugin-prod
Copy link
Copy Markdown

🚀 Benchmarks report

Package aws 👍(15) 💚(3) 💔(4)

Expand to view
Data stream Previous EPS New EPS Diff (%) Result
securityhub_insights 1519.76 1256.28 -263.48 (-17.34%) 💔
cloudtrail 2012.07 1466.28 -545.79 (-27.13%) 💔
config 5988.02 4739.34 -1248.68 (-20.85%) 💔
emr_logs 30303.03 18518.52 -11784.51 (-38.89%) 💔

To see the full report comment with /test benchmark fullreport

@elasticmachine
Copy link
Copy Markdown

💚 Build Succeeded

History

cc @moxarth-rathod

Copy link
Copy Markdown
Contributor

@agithomas agithomas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code owner approval.

@moxarth-rathod moxarth-rathod merged commit 0046a2f into elastic:main Jan 3, 2026
8 checks passed
@elastic-vault-github-plugin-prod
Copy link
Copy Markdown

Package aws - 5.5.0 containing this change is available at https://epr.elastic.co/package/aws/5.5.0/

@andrewkroh andrewkroh added the dashboard Relates to a Kibana dashboard bug, enhancement, or modification. label Jan 8, 2026
jakubgalecki0 pushed a commit to jakubgalecki0/integrations that referenced this pull request Feb 19, 2026
…elastic#16713)

aws: add overview dashboards for AWS Web Application Firewall data stream
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dashboard Relates to a Kibana dashboard bug, enhancement, or modification. enhancement New feature or request Integration:aws AWS Team:SDE-Crest Crest developers on the Security Integrations team [elastic/sit-crest-contractors] Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[AWS WAF] - Add dashboards for AWS Web Application Firewall data stream

5 participants