[axonius][compute] Add Axonius Compute datastream

[muskan-agarwal26]

Proposed commit message

The release includes compute data stream and associated dashboard.

Axonius fields are mapped to their corresponding ECS fields where possible.

Test samples were derived from live data samples, which were subsequently
sanitized.

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.
• I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

To test the axonius package:

• Clone integrations repo.
• Install elastic package locally.
• Start elastic stack using elastic-package.
• Move to integrations/packages/axonius directory.
• Run the following command to run tests.

elastic-package test

2025/12/17 17:06:54  INFO New version is available - v0.117.1. Download from: https://github.com/elastic/elastic-package/releases/tag/v0.117.1
Run asset tests for the package
2025/12/17 17:06:54  INFO License text found in "/root/GITHUB/integrations/LICENSE.txt" will be included in package
--- Test results for package: axonius - START ---
╭─────────┬─────────────┬───────────┬──────────────────────────────────────────────────────────────────┬────────┬──────────────╮
│ PACKAGE │ DATA STREAM │ TEST TYPE │ TEST NAME                                                        │ RESULT │ TIME ELAPSED │
├─────────┼─────────────┼───────────┼──────────────────────────────────────────────────────────────────┼────────┼──────────────┤
│ axonius │             │ asset     │ dashboard axonius-08681c8c-7071-48b8-9fb2-e2c31c38539f is loaded │ PASS   │      1.807µs │
│ axonius │ compute     │ asset     │ index_template logs-axonius.compute is loaded                    │ PASS   │        388ns │
│ axonius │ compute     │ asset     │ ingest_pipeline logs-axonius.compute-0.1.0 is loaded             │ PASS   │        280ns │
╰─────────┴─────────────┴───────────┴──────────────────────────────────────────────────────────────────┴────────┴──────────────╯
--- Test results for package: axonius - END   ---
Done
Run pipeline tests for the package
--- Test results for package: axonius - START ---
╭─────────┬─────────────┬───────────┬───────────────────────────────────────────────────┬────────┬──────────────╮
│ PACKAGE │ DATA STREAM │ TEST TYPE │ TEST NAME                                         │ RESULT │ TIME ELAPSED │
├─────────┼─────────────┼───────────┼───────────────────────────────────────────────────┼────────┼──────────────┤
│ axonius │ compute     │ pipeline  │ (ingest pipeline warnings test-compute-image.log) │ PASS   │ 705.390006ms │
│ axonius │ compute     │ pipeline  │ (ingest pipeline warnings test-compute.log)       │ PASS   │ 749.579631ms │
│ axonius │ compute     │ pipeline  │ (ingest pipeline warnings test-device.log)        │ PASS   │ 611.203625ms │
│ axonius │ compute     │ pipeline  │ test-compute-image.log                            │ PASS   │ 274.604275ms │
│ axonius │ compute     │ pipeline  │ test-compute.log                                  │ PASS   │ 282.204702ms │
│ axonius │ compute     │ pipeline  │ test-device.log                                   │ PASS   │  529.70163ms │
╰─────────┴─────────────┴───────────┴───────────────────────────────────────────────────┴────────┴──────────────╯
--- Test results for package: axonius - END   ---
Done
Run policy tests for the package
--- Test results for package: axonius - START ---
No test results
--- Test results for package: axonius - END   ---
Done
Run static tests for the package
--- Test results for package: axonius - START ---
╭─────────┬─────────────┬───────────┬──────────────────────────┬────────┬──────────────╮
│ PACKAGE │ DATA STREAM │ TEST TYPE │ TEST NAME                │ RESULT │ TIME ELAPSED │
├─────────┼─────────────┼───────────┼──────────────────────────┼────────┼──────────────┤
│ axonius │ compute     │ static    │ Verify sample_event.json │ PASS   │ 227.924512ms │
╰─────────┴─────────────┴───────────┴──────────────────────────┴────────┴──────────────╯
--- Test results for package: axonius - END   ---
Done
Run system tests for the package
2025/12/17 17:07:04  INFO Installing package...
2025/12/17 17:07:04  INFO License text found in "/root/GITHUB/integrations/LICENSE.txt" will be included in package
2025/12/17 17:07:06  INFO Running test for data_stream "compute" with configuration 'default'
2025/12/17 17:07:14  INFO Setting up independent Elastic Agent...
2025/12/17 17:07:29  INFO Setting up service...
2025/12/17 17:07:52  INFO Validating test case...
2025/12/17 17:07:54  INFO Tearing down service...
2025/12/17 17:07:55  INFO Write container logs to file: /root/GITHUB/integrations/build/container-logs/axonius-1765971475420871455.log
2025/12/17 17:07:59  INFO Tearing down agent...
2025/12/17 17:07:59  INFO Write container logs to file: /root/GITHUB/integrations/build/container-logs/elastic-agent-1765971479890131742.log
2025/12/17 17:08:26  INFO Uninstalling package...
--- Test results for package: axonius - START ---
╭─────────┬─────────────┬───────────┬───────────┬────────┬───────────────╮
│ PACKAGE │ DATA STREAM │ TEST TYPE │ TEST NAME │ RESULT │  TIME ELAPSED │
├─────────┼─────────────┼───────────┼───────────┼────────┼───────────────┤
│ axonius │ compute     │ system    │ default   │ PASS   │ 48.082995835s │
╰─────────┴─────────────┴───────────┴───────────┴────────┴───────────────╯
--- Test results for package: axonius - END   ---
Done

Related issues

• Relates [New Integration] Axonius #15034
• Relates [axonius] - Fix Cannot execute ILM policy delete step in other datastreams elasticsearch#139512

Screenshots

[botelastic]

Hi! We just realized that we haven't looked into this PR in a while. We're sorry! We're labeling this issue as Stale to make it hit our filters and make sure we get back to it as soon as possible. In the meantime, it'd be extremely helpful if you could take a look at it as well and confirm its relevance. A simple comment with a nice emoji will be enough :+1. Thank you for your contribution!

[botelastic]

Hi! This PR has been stale for a while and we're going to close it as part of our cleanup procedure. We appreciate your contribution and would like to apologize if we have not been able to review it, due to the current heavy load of the team. Feel free to re-open this PR if you think it should stay open and is worth rebasing. Thank you for your contribution!

[ShourieG]

@muskan-agarwal26 please fix the conflicts

[efd6]

I feel that this is problematic since it's not a nested. I don't think there is anything we can do about this, but wanted to raise it.

[efd6]

This has git conflict mark damage.

[elastic-vault-github-plugin-prod]

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: 44fb955

History

• 💚 Build #42905 succeeded 1d9a27f

[efd6]

@github is failing to show a file that I know to be on this branch, the axonius-logo.svg. It appears that @github does not know how to differentiate angle brackets from conflict marks. I have confirmed locally that the file is correct, so approving on that basis.

[elastic-vault-github-plugin-prod]

Package axonius - 0.1.0 containing this change is available at https://epr.elastic.co/package/axonius/0.1.0/