elastic / elastic/integrations
[azure.activitylogs] Missing fields in template
- Dominant language
- Handlebars
- Stars
- 333
- Forks
- 647
- Avg merge
- 3d 4h
- Merged PRs (30d)
- 209
Description
### Integration Name
Azure Logs [azure]
### Dataset Name
azure.activitylogs
### Integration Version
1.31
### Agent Version
8.19
### Agent Output Type
elasticsearch
### Elasticsearch Version
8.19
### OS Version and Architecture
RedHat x64 9
### Software/API Version
_No response_
### Error Message
Missing fields in template
Field Names:
azure.activitylogs.properties.requestbody
azure.activitylogs.properties.entity
Copy entity to the related.user field:
azure.activitylogs.properties.entity --> related.user
### Event Original
_No response_
### What did you do?
enabled the integration via fleet.
### What did you see?
a big question mark for the field names:
azure.activitylogs.properties.requestbody
azure.activitylogs.properties.entity
### What did you expect to see?
azure.activitylogs.properties.requestbody --> is a json object
azure.activitylogs.properties.entity --> url
### Anything else?
adjust template mapping
Contributor guide
Assessment
This issue has not been assessed yet.