Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Port Auditbeat and Packetbeat to the agent V2 control protocol #32786

Closed
Tracked by #836
cmacknz opened this issue Aug 23, 2022 · 2 comments
Closed
Tracked by #836

Port Auditbeat and Packetbeat to the agent V2 control protocol #32786

cmacknz opened this issue Aug 23, 2022 · 2 comments
Assignees
Labels
Team:Elastic-Agent-Data-Plane Label for the Agent Data Plane team v8.6.0

Comments

@cmacknz
Copy link
Member

cmacknz commented Aug 23, 2022

This will be done as a follow up to #32673 which has already gotten quite large. The changes will be merged to the same Beats V2 feature branch while we wait for the V2 protocol to be fully supported in agent.

The changes should in theory mirror the changes that were already made for Filebeat and Metricbeat.

  • The Packetbeat agent spec file looks like it only includes the input selectors to tell agent when to start Packetbeat. I expect it will not require any changes besides use of the new V2 protocol client.
  • The Auditbeat agent spec file is as complex as the one for Metricbeat, as Auditbeat is internally based on Metricbeat. This will require some closer investigation and possibly some help from @andrewkroh and team.
@elasticmachine
Copy link
Collaborator

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

@elasticmachine
Copy link
Collaborator

Pinging @elastic/elastic-agent-data-plane (Team:Elastic-Agent-Data-Plane)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Team:Elastic-Agent-Data-Plane Label for the Agent Data Plane team v8.6.0
Projects
None yet
Development

No branches or pull requests

3 participants