elastic / elastic/integrations

[Azure Activity logs] Validate and add support for new log categories

Open
#14,217 0 comments 0 reactions 0 assignees View on GitHub
enhancement Integration:azure Team:Obs-InfraObs
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
2d 17h
Merged PRs (30d)
225

Description

### Summary

The Azure activity log currently process Administrative, Policy, ResourceHealth etc... As the logging schema for the categories like **StorageRead** is different form the one which we process for the other existing log categories.

### Observations
The authorization emits list of values in the StorageRead category which is not the case in the existing log category. We need to validate the log category and logging schema and add support for the new logging categories if needed.

#### Sample schema

| StorageRead | Existing Activity Logs |
| ------------- | ------------- |
| "identity":{"authorization":[{}]} | "identity":{"authorization":{}}

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.