[Azure Application Gateway] Fix parsing error client port is blank and adjust for timeStamp#5073
[Azure Application Gateway] Fix parsing error client port is blank and adjust for timeStamp#5073zmoog merged 11 commits intoelastic:mainfrom nicpenning:patch-2
Conversation
Pipeline fails to parse Azure Application Gateway logs when the client port field exists with no data. ``` error.message : For input string: \"\" convert ```
|
Hey @nicpenning, thank you for contributing to the Azure Application Gateway integration with this fix! |
packages/azure/data_stream/application_gateway/elasticsearch/ingest_pipeline/default.yml
Show resolved
Hide resolved
The fields are not in the same order but is very similar to other examples except with the blank clientPort field.
For some reason, the _ingest.timestamp is outside of the _source field. I have ommited it from here. Furthermore, it seems timestamp changed to timeStamp, so the pipeline will need to be updated.
|
When I was going through and trying to provide some example data I stumbled upon another issue which was the timestamp in the document I had was using timeStamp so I added that to the pipeline. |
packages/azure/data_stream/application_gateway/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
packages/azure/data_stream/application_gateway/elasticsearch/ingest_pipeline/default.yml
Show resolved
Hide resolved
packages/azure/data_stream/application_gateway/elasticsearch/ingest_pipeline/default.yml
Show resolved
Hide resolved
packages/azure/data_stream/application_gateway/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
packages/azure/data_stream/application_gateway/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
|
Not sure where my comment went, but yes, this data is from the Azure Gov cloud. 😀 |
packages/azure/data_stream/application_gateway/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
|
Okay @zmoog, how is everything looking now? |
|
/test |
🌐 Coverage report
|
|
Any further action needed for this? I don't want this to get too stale. |
Yep, someone must check and fix the errors in the CI pipeline. I can't merge the PR if they aren't all green. Let me take a look at the failing one. |
|
/test |
The pipeline test was failing due to differences between the expected
and actual document.
I fixed the pipeline tests error by regenerating the expected document
using the following command:
elastic-package test pipeline --generate
The `--generate` option runs the pipeline and save the result in a
test result file.
|
@nicpenning, the bot will comment on this PR when the new version is available. Thank you for your contribution and your patience in these back and forth! |
|
Package azure - 1.5.6 containing this change is available at https://epr.elastic.co/search?package=azure |
Pipeline fails to parse Azure Application Gateway logs when the client port field exists with no data.
What does this PR do?
Checklist
changelog.ymlfile.