elastic / elastic/integrations

[azure.activitylogs] Missing fields in template

Open
#16,562 0 comments 0 reactions 0 assignees View on GitHub
Integration:azure needs:triage Team:Obs-InfraObs
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
3d 4h
Merged PRs (30d)
209

Description

### Integration Name

Azure Logs [azure]

### Dataset Name

azure.activitylogs

### Integration Version

1.31

### Agent Version

8.19

### Agent Output Type

elasticsearch

### Elasticsearch Version

8.19

### OS Version and Architecture

RedHat x64 9

### Software/API Version

_No response_

### Error Message

Missing fields in template

Field Names:
azure.activitylogs.properties.requestbody
azure.activitylogs.properties.entity

Copy entity to the related.user field:
azure.activitylogs.properties.entity --> related.user

### Event Original

_No response_

### What did you do?

enabled the integration via fleet.

### What did you see?

a big question mark for the field names:
azure.activitylogs.properties.requestbody
azure.activitylogs.properties.entity

### What did you expect to see?

azure.activitylogs.properties.requestbody --> is a json object
azure.activitylogs.properties.entity --> url

### Anything else?

adjust template mapping

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.