Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support new Azure audit logs and signin logs #2682

Merged
merged 8 commits into from
Feb 17, 2022
Merged

Support new Azure audit logs and signin logs #2682

merged 8 commits into from
Feb 17, 2022

Conversation

kaiyan-sheng
Copy link
Contributor

@kaiyan-sheng kaiyan-sheng commented Feb 11, 2022

What does this PR do?

This PR is to add support for the new Azure audit logs and signin logs. Sample logs are provided by the Azure team and added into /_dev/test/pipeline for both auditlogs data stream and signinlogs data stream in Azure package.

This PR added two fields for audit logs and 4 fields for signin logs:

  • azure.auditlogs.level
  • azure.auditlogs.properties.authentication_protocol
  • azure.signinlogs.properties.authentication_protocol
  • azure.signinlogs.properties.incoming_token_type
  • azure.signinlogs.properties.service_principal_credential_key_id
  • azure.signinlogs.properties.unique_token_identifier

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.

@kaiyan-sheng kaiyan-sheng self-assigned this Feb 11, 2022
@elasticmachine
Copy link

elasticmachine commented Feb 11, 2022

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS
Pipeline View Test View Changes Artifacts preview preview

Expand to view the summary

Build stats

  • Start Time: 2022-02-15T19:21:29.873+0000

  • Duration: 19 min 3 sec

Test stats 🧪

Test Results
Failed 0
Passed 84
Skipped 0
Total 84

🤖 GitHub comments

To re-run your PR in the CI, just comment with:

  • /test : Re-trigger the build.

@kaiyan-sheng kaiyan-sheng merged commit 44b728e into elastic:main Feb 17, 2022
@kaiyan-sheng kaiyan-sheng deleted the test_with_sample_logs branch February 17, 2022 16:38
eyalkraft pushed a commit to build-security/integrations that referenced this pull request Mar 30, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants