Test packages mappings - DO NOT MERGE #12300
Conversation
This reverts commit 81c7871.
🚀 Benchmarks reportTo see the full report comment with |
Re-generate sample_event file since there were errors related to a field missing the expected type (auditd.data.audit_pid). This was not failing previously probably because "auditd.data" was declared as flattened, and that is skipped in validation.
| - external: ecs | ||
| name: threat.enrichments.indicator.first_seen | ||
| - external: ecs | ||
| name: threat.enrichments.indicator.last_seen |
There was a problem hiding this comment.
Previously they were mapped as keyword, with this change they would be date.
| - external: ecs | ||
| name: threat.indicator.modified_at | ||
|
|
There was a problem hiding this comment.
Previously they were mapped as keyword, with this change they would be date.
💚 Build Succeeded
History
cc @mrodm |
|
| @@ -27,7 +27,7 @@ | |||
| type: long | |||
| - name: AsepWrittenCount | |||
| type: long | |||
| - name: assessments.* | |||
| - name: assessments | |||
There was a problem hiding this comment.
This definition was generating a dynamic template to transform objects to flattened, and it was not recognizing the fields under assessments like assessments.application_firewall_mac.
| @@ -82,7 +82,7 @@ | |||
| metric_type: gauge | |||
| description: | | |||
| The percentage of used swap memory. | |||
| - name: vmstat.* | |||
| - name: vmstat | |||
There was a problem hiding this comment.
This definition was generating a dynamic template to transform objects to flattened, and it was not recognizing the fields under vmstats like vmstats.allocstall_device.
Relates #3935
Do tests in the packages failed when using the validation based on mappings.