elastic / elastic/beats

libbeat/publisher: debugging elastic agent publisher event log entries is unreasonably onerous

Open Beginner friendly
#45,106 6 comments 0 reactions 0 assignees View on GitHub
Team:Elastic-Agent-Data-Plane
Dominant language
Go
Stars
12.7k
Forks
5k
Avg merge
2d 15m
Merged PRs (30d)
385

Description

When debugging publication issues, it may be necessary to examine events in the logs/data/events for the actual event that is being published. Currently, this event is rendered into the long message field as text making it unnecessarily difficult to extract by standard tooling (e.g. `jq`). This happens in the [`debugPrintProcessor`](https://github.com/elastic/beats/blob/8b25d5b14bb12c02bac944f44f15b35a151a71cf/libbeat/publisher/processing/processors.go#L191-L216).

Contributor guide

Open the contributing guide

Research direction

Start in libbeat/publisher/processing/processors.go at debugPrintProcessor, the location identified in the issue. Trace how the published event is placed in the log entry and make the event separately extractable by standard JSON tooling such as jq; verify the resulting log structure with the relevant publisher processing tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
backend, observability-sre
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
72/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.