elastic / elastic/integrations

jamf_pro: ingest pipeline sets host.address field

Open
#20,448 1 comment 0 reactions 0 assignees View on GitHub
breaking change bug Integration:jamf_pro Team:Security-Service Integrations
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
2d 17h
Merged PRs (30d)
225

Description

The ingest pipeline sets `host.address`, but this field is not a defined ECS field. Removal of the field should be considered, but doing so would be a breaking change since there may be users who now depend on it for searches.

Contributor guide

Open the contributing guide

Research direction

Start by locating the jamf_pro ingest pipeline and checking how it maps the non-ECS `host.address` field. Verify the ECS field definition and inspect any pipeline tests or fixtures; done means the issue has a decided, validated treatment of the field and its breaking-change implications.

Written by the indexing model from the issue text.

Assessment

Tech stack
handlebars
Domain
data-engineering
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.