elastic / elastic/integrations

Add component/unit information to elastic_agent.status_change dataset

Open
#16,498 2 comments 0 reactions 0 assignees View on GitHub
enhancement Integration:elastic_agent Team:Elastic-Agent-Control-Plane Team:Fleet
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
3d 4h
Merged PRs (30d)
209

Description

**Describe the enhancement:**
Have the component/unit information fields on the elastic_agent.status_change dataset logs, like we have on the elastic_agent dataset. This would allow to know the component/unit that caused the status change on the host.

**Describe a specific use case for the enhancement or feature:**
If I want to get an alert when a host became Unhealthy only if its Elastic Defend integration failed.

**What is the definition of done?**
Having the following field on elastic_agent.status_change dataset logs:
- component.id
- component.state
- unit.id
- unit.state

OR

Having the field on elastic_agent.status_change dataset logs:
- reason for status change

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.