Commits on Dec 1, 2020

1. Add pipeline tests for AWS CloudTrail …

   The tests revealed a few issues. There was an error in the pipeline for update-user-json.log because
   serviceEventDetails was not present. This was the error
   
               "error": {
                   "message": "Cannot invoke \\\"Object.getClass()\\\" because \\\"receiver\\\" is null"
               }
   
   The aws.cloudtrail.read_only field was mapped as keyword but was actual a JSON boolean.
   I changed the type to boolean, but do not plan to backport this change to Filebeat.
   
   And lastly some ECS user_agent fields were missing.
   
   This depends on elastic/elastic-package#177 to make the flattened fields pass
   test validation.

   

   andrewkroh committed Dec 1, 2020
   Configuration menu

   • View commit details
   • Copy full SHA for e13a28f
   • Browse repository at this point

   Copy the full SHA

   e13a28f View commit details

   Browse the repository at this point in the history