elastic / elastic/integrations

[Cribl]: Allow the selection of any datastreams

Open
#17,234 1 comment 0 reactions 0 assignees View on GitHub
Integration:cribl needs:triage Team:Security-Service Integrations
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
3d 4h
Merged PRs (30d)
209

Description

### Integration Name

Cribl [cribl]

### Dataset Name

_No response_

### Integration Version

1.0.1

### Agent Version

9.2.4

### OS Version and Architecture

NA

### User Goal

I am attempting to route a cribl _dataId over to a custom data stream that has a matching ingest pipelines, index template, component template, etc but am unable to select one not created by a fleet integration. I need to be able to select any data stream to avoid logs@custom and global@custom potentially running twice

### Existing Features

It only allows the selection of data streams created by integrations managed by fleet

### What did you see?

I was unable to type in a data stream that I precreated on the cluster or a new data stream that did not exist

### Anything else?

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.