Need to add data_stream.dataset filter in dashboards across all the integrations that have it missing.

[lalit-satapathy]

As part of this task, need to add the data_stream.dataset filter across all the integrations.

Following integration will be covered as part of this
As part of this #8751 work will be completed as well.
This issue will cover the integration those has owner obs-infraobs-integrations

Completed:

• System - [System] Add global filter in dashboard for System #9573
• Oracle - [Oracle] Add global filter in dashboard for Oracle #9655

In Review:

• ActiveMQ - Add global level data_stream.daataset dashboard filter #9768
• Apache Spark - Add global level data_stream.daataset dashboard filter #9768
• Apache Tomcat - Add global level data_stream.daataset dashboard filter #9768
• Hadoop - Add global level data_stream.daataset dashboard filter #9768
• Airflow - Add global level data_stream.daataset dashboard filter #9768
• Apache - Add global level data_stream.daataset dashboard filter #9768
• Cassandra - Add global level data_stream.daataset dashboard filter #9768
• Ceph - Add global level data_stream.daataset dashboard filter #9768
• Citrix ADC - Add global level data_stream.daataset dashboard filter #9768
• CockroachDB - Add global level data_stream.daataset dashboard filter #9768
• Stan - Add global level data_stream.dataset dashboard filter #9869
• Nats - Add global level data_stream.dataset dashboard filter #9869
• Golang - Add global level data_stream.dataset dashboard filter #9869
• Couchbase - Add global level data_stream.dataset dashboard filter #9869
• Couchdb - Add global level data_stream.dataset dashboard filter #9869
• IIS - Add global level data_stream.dataset dashboard filter #9869
• Memcached - Add global level data_stream.dataset dashboard filter #9869
• Zookeeper - Add global level data_stream.dataset dashboard filter #9869
• InfluxDB - Add global level data_stream.dataset dashboard filter #9869
• Coredns - Add global level data_stream.dataset dashboard filter #9869

In Progress:

• Awsfargate
• azure_app_service
• azure_application_insights
• azure_billing
• azure_functions
• Etcd
• Haproxy
• Ibmmq
• jolokia_input
• Kafka
• kafka_log
• microsoft_sqlserver
• Mongodb
• mongodb_atlas
• Mysql
• nagios_xi
• Nginx
• Oracle_weblogic
• php_fpm
• Postgresql
• Prometheus
• prometheus_input
• Rabbitmq
• Redis
• Redisenterprise
• Salesforce
• Springboot
• sql_input
• stasd_input
• Tomcat
• Trafik
• vsphere
• websphere_application_server

[lalit-satapathy]

@milan-elastic, Lets target this for next sprint. Please update the description with details.

Looks overlap of: #8751

[milan-elastic]

@milan-elastic, Lets target this for next sprint. Please update the description with details.

Looks overlap of: #8751

Sure! @lalit-satapathy

[lalit-satapathy]

Another duplicate: #7400

[lalit-satapathy]

Duplicate: #7217

[milan-elastic]

For the data_stream.dataset filter, I have found the couple of scenarios as mentioned below,

• There would be some dashboards where event.dataset is present instead of data_stream.dataaset so we will update that filter from event.dataset to data_stream.dataset
• If the dashboard contains the multiple data stream fields, we will add the data stream filters with OR operator,
  For example, if the dashboard is having session and memory data stream fields we will add e.g. data_stream.dataset: apache_tomcat.session OR data_stream.dataset: apache_tomcat.memory

From a PR perspective, we will structure our PRs as follows, categorizing them into the following groups of packages:
- AWS
- Azure
- GCP
- Cloud Native packages
- Infra-Obs packages

If the PRs are too big, we'll divide them further.
CC: @lalit-satapathy @tommyers-elastic

[shmsr]

Duplicate #8348?

[ishleenk17]

• There would be some dashboards where event.dataset is present instead of data_stream.dataset so we will update that filter from event.dataset to data_stream.dataset

Are the event.dataset and data_stream.dataset values always the same? To confirm that it doesn't break dashboards for existing users.

[milan-elastic]

• There would be some dashboards where event.dataset is present instead of data_stream.dataset so we will update that filter from event.dataset to data_stream.dataset

Are the event.dataset and data_stream.dataset values always the same? To confirm that it doesn't break dashboards for existing users.

So far we have noticed that it has the same values, but if we see if it's different I'll mention that explicitly in PR