forked from elastic/integrations
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add support for additional fields from V2 ALB logs (elastic#304)
- Loading branch information
1 parent
596abdb
commit cae646a
Showing
10 changed files
with
127 additions
and
17 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
1 change: 1 addition & 0 deletions
1
packages/aws/data_stream/elb_logs/_dev/test/pipeline/test-alb.log
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| http 2018-07-02T22:23:00.186641Z app/my-loadbalancer/50dc6c495c0c9188 192.168.131.39:2817 10.0.0.1:80 0.000 0.001 0.000 200 200 34 366 "GET http://www.example.com:80/ HTTP/1.1" "curl/7.46.0" - - arn:aws:elasticloadbalancing:us-east-2:123456789012:targetgroup/my-targets/73e2d6bc24d8a067 "Root=1-58337262-36d228ad5d99923122bbe354" "-" "-" 0 2018-07-02T22:22:48.364000Z "forward,redirect" "-" "-" "10.0.0.1:80" "200" "-" "-" |
85 changes: 85 additions & 0 deletions
85
packages/aws/data_stream/elb_logs/_dev/test/pipeline/test-alb.log-expected.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,85 @@ | ||
| { | ||
| "expected": [ | ||
| { | ||
| "cloud": { | ||
| "provider": "aws" | ||
| }, | ||
| "tracing": { | ||
| "trace": { | ||
| "id": "Root=1-58337262-36d228ad5d99923122bbe354" | ||
| } | ||
| }, | ||
| "@timestamp": "2018-07-02T22:23:00.186Z", | ||
| "http": { | ||
| "request": { | ||
| "method": "get", | ||
| "body": { | ||
| "bytes": 34 | ||
| }, | ||
| "referrer": "http://www.example.com:80/" | ||
| }, | ||
| "version": "1.1", | ||
| "response": { | ||
| "body": { | ||
| "bytes": 366 | ||
| }, | ||
| "status_code": 200 | ||
| } | ||
| }, | ||
| "source": { | ||
| "port": "2817", | ||
| "ip": "192.168.131.39" | ||
| }, | ||
| "aws": { | ||
| "elb": { | ||
| "trace_id": "Root=1-58337262-36d228ad5d99923122bbe354", | ||
| "matched_rule_priority": "0", | ||
| "type": "http", | ||
| "request_processing_time": { | ||
| "sec": 0.0 | ||
| }, | ||
| "response_processing_time": { | ||
| "sec": 0.0 | ||
| }, | ||
| "target_port": [ | ||
| "10.0.0.1:80" | ||
| ], | ||
| "protocol": "http", | ||
| "target_status_code": [ | ||
| "200" | ||
| ], | ||
| "name": "app/my-loadbalancer/50dc6c495c0c9188", | ||
| "backend": { | ||
| "port": "80", | ||
| "http": { | ||
| "response": { | ||
| "status_code": 200 | ||
| } | ||
| }, | ||
| "ip": "10.0.0.1" | ||
| }, | ||
| "target_group": { | ||
| "arn": "arn:aws:elasticloadbalancing:us-east-2:123456789012:targetgroup/my-targets/73e2d6bc24d8a067" | ||
| }, | ||
| "backend_processing_time": { | ||
| "sec": 0.001 | ||
| }, | ||
| "action_executed": [ | ||
| "forward", | ||
| "redirect" | ||
| ] | ||
| } | ||
| }, | ||
| "event": { | ||
| "start": "2018-07-02T22:22:48.364000Z", | ||
| "end": "2018-07-02T22:23:00.186Z", | ||
| "category": "web", | ||
| "kind": "event", | ||
| "outcome": "success" | ||
| }, | ||
| "user_agent": { | ||
| "original": "curl/7.46.0" | ||
| } | ||
| } | ||
| ] | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters