-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Adding filenames from the zip to the response for httpjson #34044
Conversation
This pull request does not have a backport label.
To fixup this pull request, you need to add the backport labels for the needed
|
Kudos, SonarCloud Quality Gate passed! 0 Bugs No Coverage information |
Pinging @elastic/security-external-integrations (Team:Security-External Integrations) |
(cherry picked from commit b3f3633)
What does this PR do?
The httpjson input will report filenames for application/zip events in the response.
Why is it important?
We have a bug for an integration that utilizes the filename to determine a
log_type
field as the field is in the name. For example,filename="delivery_20160705162902600.log"
->log_type: delivery
. When utilizingcompress: true
, the filename is instead a random guid and so thelog_type
can't be derived, examplefilename="8578FCFC-A305-4D9A-99CB-F4D5ECEFE297.zip"
.Checklist
I have commented my code, particularly in hard-to-understand areasI have made corresponding changes to the documentationI have made corresponding change to the default configuration filesCHANGELOG.next.asciidoc
orCHANGELOG-developer.next.asciidoc
.Author's Checklist
How to test this PR locally
Related issues
Closes #33952
Use cases
Screenshots
Logs