elastic / elastic/integrations

[azure] Normalize durationMs to long across Azure integrations

Open
#16,677 0 comments 0 reactions 0 assignees View on GitHub
bug Integration:azure Team:obs-ds-hosted-services
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
3d 4h
Merged PRs (30d)
209

Description

## Context

Some Azure services generate the `durationMs` field with a string value (`"durationMs": "0"`) instead of a long value (`"durationMs": 0`), as implied by the [common schema](https://learn.microsoft.com/en-us/azure/azure-monitor/platform/resource-logs-schema#top-level-common-schema), and explicitly stated in some log categories docs like [aadprovisioninglogs](https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/aadprovisioninglogs#columns).

## Goal

Make sure all Azure logs-focused integration always convert the `durationMs` to `long` before sending the log event to ES.

## Impact

Not sending the `durationMs` values with the correct values can create mapping errors and deteriorate the ingest experience.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.