[zoom] Add support for the operation data stream

[brijesh-elastic]

Proposed commit message

zoom: add support for operation data stream

This data stream collects audit admin and user activity, such as adding a new user,
changing account settings, and deleting recordings.
API documentation is available here[1] and test samples were derived from documentation.

It also updates the default values for the rate limiting and page size parameters in the
`activity` data stream

[1] https://developers.zoom.us/docs/api/meetings/#tag/reports/get/report/operationlogs

Note

To Reviewers:

• This data stream has not been tested with a live instance.

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.
• I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

• Clone integrations repo.
• Install elastic package locally.
• Start elastic stack using elastic-package.
• Move to integrations/packages/zoom directory.
• Run the following command to run tests.

elastic-package test -v

Related issues

• Relates [zoom] Add API support for operations logs #15236

[github-actions]

Elastic Docs Style Checker (Vale)

Summary: 2 warnings found

⚠️ Warnings (2): Fix when the suggestion improves clarity or correctness.

File	Line	Rule	Message
packages/zoom/_dev/build/docs/README.md	5	Elastic.EndPuntuaction	Don't end headings with punctuation.
packages/zoom/manifest.yml	71	Elastic.DontUse	Don't use 'Please'.

---

The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

[elastic-vault-github-plugin-prod]

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

[infra-vault-gh-plugin-prod]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

[vera-review-bot]

Review summary

Issues found across the latest commits 7175142 — 1 low

• 🔵 Rate Limit description is a run-on sentence — insert a period after 'on the account' so the two sentences read '...on the account. Leave empty to disable client-side rate limiting.' (link) (Unresolved)

A new commit triggers another review — at most once every 15 minutes. I skip the PR while it's approved or has merge conflicts.

🤖 AI-Generated Review | Vera Review Bot | 📚 Knowledge base: integration-skills

⚠️ Automated review — verify suggestions before applying.

[kcreddy]

Nit only

[elastic-vault-github-plugin-prod]

✅ All changelog entries have the correct PR link.

[kcreddy]

LGTM

[infra-vault-gh-plugin-prod]

💚 Build Succeeded

• Buildkite Build
• Commit: 5558ec5

History

• 💚 Build #45526 succeeded 7175142
• 💚 Build #45325 succeeded 14794ff
• 💚 Build #44486 succeeded c3e5f61

cc @brijesh-elastic

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request

[elastic-vault-github-plugin-prod]

Package zoom - 1.25.0 containing this change is available at https://epr.elastic.co/package/zoom/1.25.0/