elastic / elastic/integrations
[Azure Activity logs] Validate and add support for new log categories
- Dominant language
- Handlebars
- Stars
- 333
- Forks
- 647
- Avg merge
- 2d 17h
- Merged PRs (30d)
- 225
Description
### Summary
The Azure activity log currently process Administrative, Policy, ResourceHealth etc... As the logging schema for the categories like **StorageRead** is different form the one which we process for the other existing log categories.
### Observations
The authorization emits list of values in the StorageRead category which is not the case in the existing log category. We need to validate the log category and logging schema and add support for the new logging categories if needed.
#### Sample schema
| StorageRead | Existing Activity Logs |
| ------------- | ------------- |
| "identity":{"authorization":[{}]} | "identity":{"authorization":{}}
Contributor guide
Assessment
This issue has not been assessed yet.