…ader

…26276)

* fixing some typos in the default oracle config, and adding default values

* adding changelog entry

…lastic#26263)

In the script processor, the `decode_xml` and `decode_xml_wineventlog` processors are now available as `DecodeXML` and `DecodeXMLWineventlog` respectively. This follows the same naming conventions as other processors exposed though the `script` processor. For example you can write `new processor.DecodeXML({...})`.

…stic#26273)

* Add preserve_original_event option to o365audit input

* Use String method from MapStr

* Add test

Use configured CPU as total, use it to calculate free too.
Total and free resources are only reported if they are configured
with a total greater than zero.

* Add log.flags and object metadata to aws-s3 input events

This adds the log.flags field created by the line readers to aws-s3 events. log.flags contains metadata like `multiline` and `truncated` to indicate how the data was processed.

This also adds a config option to include S3 object metadata in the event if it exists. The use case for me was to get the Last-Modified timestamp for cases where the log does not have a timestamp or it cannot be parsed. Then this can be used as a fallback.

* Pass metadata using s3Info struct to avoid adding new func params

The libbeat LineReader implementation did not handle the case where the underlying io.Reader
it was reading from returns bytes and io.EOF. It was discarding the data in this case.

As per the io.Reader contract:

    a Reader returning a non-zero number of bytes at the end of the input stream may return either err == EOF or err == nil.

This occurs often with the gzip.Reader. It returns a large chunk of data at the end of the file and io.EOF at the same time.

…stic#25771)

* initial commit

* finux linux refactor

* fix up freebsd

* port main metricset, start openbsd

* start work on openbsd vagrantfile

* refactors of API, add darwin support

* fix darwin implementation

* refactor API, move tests, remove old code, take a crack at AIX

* fix aix init func

* fix tests

* regenerate core data.json

* small fixes, fix host field

* update tests

* run correct mage commands

* try to fix system tests

* more fixes for windows python tests

* refactor CPU struct, use reflection

* refactor reflection code, add validation

* move metrics to its own internal folder

* move directories, again

* move directories, again

* use optional Uint type

* cleanup opt files

* move around naming of opt types

* fix up if block

* change opt names

* move around opt methods, cpu stat reader refactor

* fix IsZero usage

* add changelog

* Don't include full ES index template in errors

Index templates in some beats can be very large (~1MB) and including the data in errors can use a lot of memory and also makes for very large log lines. If the error is recurring then this makes the effects worse. So this change removes the index template body from the error. Users that need to see the index template for debugging can use `<beatname> export template --es.version=1.2.3`.

Fixes elastic#25540

* Update expected log messages in tests

…5999)

* elastic#25990: Add `url.extension` to Packetbeat HTTP events

* update changelog

* add tests

* updated per comment

…lastic#26324)

Updated filter expression for filtering 86 artifacts (elastic#26313)

* Forward port 7.13.2 changelog to 7.x (elastic#26315)

* docs: Prepare Changelog for 7.13.2 (elastic#26302)

* docs: Close changelog for 7.13.2

* Cleanup

Co-authored-by: Andres Rodriguez <andresrc@gmail.com>
(cherry picked from commit 0075f76)

* Edit 7.13.2 changelog (elastic#26304)

* Edit 7.13.2 changelog

* Remove unneeded line

Co-authored-by: Andres Rodriguez <andresrc@gmail.com>
(cherry picked from commit 460ebf2)

* Cleanup and fixes

* More cleanup and fixes

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
Co-authored-by: DeDe Morton <dede.morton@elastic.co>
(cherry picked from commit 3c9c96a)

* Cleanup

MongoDB 4.4 uses structured JSON format for logging, add support
for this format while keeping support for the old one too.