elastic / elastic/integrations

[pfSense]: HAproxy logs are not ingested

Open
#13,946 2 comments 0 reactions 0 assignees View on GitHub
Integration:pfsense maintainer:Community needs:triage Stalled Team:Obs-InfraObs
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
3d 4h
Merged PRs (30d)
209

Description

### Integration Name

pfSense [pfsense]

### Dataset Name

pfsense.log

### Integration Version

1.22.0

### Agent Version

8.17.5

### Agent Output Type

elasticsearch

### Elasticsearch Version

8.17.5

### OS Version and Architecture

Ubuntu

### Software/API Version

_No response_

### Error Message

_No response_

### Event Original

_No response_

### What did you do?

x

### What did you see?

HAproxy logs are not parsed correctly and dropped.

Problem is that the [grok patterns](https://github.com/elastic/integrations/blob/ea03f0086f7a3c709861ef03f1fb957387bad197/packages/pfsense/data_stream/log/elasticsearch/ingest_pipeline/haproxy.yml#L6) contain multiple instances of double spaces instead of single spaces between words, and the patters will never match.

![Image](https://github.com/user-attachments/assets/394254a0-9db5-4232-88ea-6dbc9ea14337)

Spaces seems to correlate with line breaks in the yaml file with pipeline definitions.

### What did you expect to see?

HAproxy logs.

### Anything else?

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.