Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Filebeat] httpjson tracer logs doesn't include chain request/response #37510

Closed
kcreddy opened this issue Dec 27, 2023 · 6 comments
Closed

[Filebeat] httpjson tracer logs doesn't include chain request/response #37510

kcreddy opened this issue Dec 27, 2023 · 6 comments
Labels
bug Filebeat Filebeat Team:Security-Service Integrations Security Service Integrations Team

Comments

@kcreddy
Copy link
Contributor

kcreddy commented Dec 27, 2023

When chain requests are being made using httpjson input, the tracer logs captured via request.tracer.filename flag doesn't include chain requests or responses. They only show parent request and response, which doesn't show the full picture.

@elasticmachine
Copy link
Collaborator

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

@kcreddy kcreddy added bug Filebeat Filebeat labels Dec 27, 2023
@kcreddy
Copy link
Contributor Author

kcreddy commented Jan 5, 2024

As described in #37551 (comment), if each chain requests/responses can be captured independently within their step config, then this issue will be redundant.

Need to decide the right approach. I think #37551 might be better approach after the httpjson docs are also updated stating that chain request/response can also be traced.

@kcreddy
Copy link
Contributor Author

kcreddy commented Jan 5, 2024

Here is the SDH too - 4177

With regards to this SDH, the Tenable PR elastic/integrations#8831 that allows capturing chain requests/responses within each step config is now merged. Tenable integration version 2.8.0 should have the chain request/responses added to the agent diagnostics.

@elasticmachine
Copy link
Collaborator

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@efd6
Copy link
Contributor

efd6 commented Feb 22, 2024

@kcreddy I think #37682 should have closed this. Am I missing something?

@kcreddy
Copy link
Contributor Author

kcreddy commented Mar 15, 2024

I think #37682 should have closed this. Am I missing something?

Yes, it should be closed.

@kcreddy kcreddy closed this as completed Mar 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Filebeat Filebeat Team:Security-Service Integrations Security Service Integrations Team
Projects
None yet
Development

No branches or pull requests

4 participants