elastic / elastic/integrations
jamf_pro: ingest pipeline sets host.address field
Open
breaking change
bug
Integration:jamf_pro
Team:Security-Service Integrations
- Dominant language
- Handlebars
- Stars
- 333
- Forks
- 647
- Avg merge
- 2d 17h
- Merged PRs (30d)
- 225
Description
The ingest pipeline sets `host.address`, but this field is not a defined ECS field. Removal of the field should be considered, but doing so would be a breaking change since there may be users who now depend on it for searches.
Contributor guide
Research direction
Start by locating the jamf_pro ingest pipeline and checking how it maps the non-ECS `host.address` field. Verify the ECS field definition and inspect any pipeline tests or fixtures; done means the issue has a decided, validated treatment of the field and its breaking-change implications.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- handlebars
- Domain
- data-engineering
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 45/100