Fix timezone parsing of Cisco module ingest pipelines (#13893)

Fixes ingest pipelines, and add timezone handling to javascript pipeline of ios metricset.
elastic · Oct 10, 2019 · 43eb364 · 43eb364
1 parent 7468ba9
commit 43eb364
Show file tree

Hide file tree

Showing 16 changed files with 660 additions and 601 deletions.
diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
@@ -155,6 +155,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 - Fixed bad handling of sequence numbers when multiple observation domains were exported by a single device (Netflow V9 and IPFIX). {pull}13821[13821]
 - Fix timezone parsing of rabbitmq module ingest pipelines. {pull}13879[13879]
 - Fix conditions and error checking of date processors in ingest pipelines that use `event.timezone` to parse dates. {pull}13883[13883]
+- Fix timezone parsing of Cisco module ingest pipelines. {pull}13893[13893]
 - Fix timezone parsing of logstash module ingest pipelines. {pull}13890[13890]
 - cisco asa and ftd filesets: Fix parsing of message 106001. {issue}13891[13891] {pull}13903[13903]
 - Fix timezone parsing of iptables, mssql and panw module ingest pipelines. {pull}13926[13926]

diff --git a/x-pack/filebeat/module/cisco/asa/test/asa.log-expected.json b/x-pack/filebeat/module/cisco/asa/test/asa.log-expected.json
diff --git a/x-pack/filebeat/module/cisco/asa/test/filtered.log-expected.json b/x-pack/filebeat/module/cisco/asa/test/filtered.log-expected.json
@@ -1,6 +1,6 @@
 [
     {
-        "@timestamp": "2018-12-31T23:00:27.000-02:00",
+        "@timestamp": "2019-01-01T01:00:27.000-02:00",
         "cisco.asa.message_id": "999999",
         "event.action": "firewall-rule",
         "event.code": 999999,
@@ -22,7 +22,7 @@
         ]
     },
     {
-        "@timestamp": "2018-12-31T23:02:12.000-02:00",
+        "@timestamp": "2019-01-01T01:02:12.000-02:00",
         "cisco.asa.message_id": "106001",
         "cisco.asa.source_interface": "eth0",
         "destination.ip": "192.168.33.12",

diff --git a/x-pack/filebeat/module/cisco/asa/test/hostnames.log-expected.json b/x-pack/filebeat/module/cisco/asa/test/hostnames.log-expected.json
@@ -1,6 +1,6 @@
 [
     {
-        "@timestamp": "2019-10-10T08:21:36.000-02:00",
+        "@timestamp": "2019-10-10T10:21:36.000-02:00",
         "cisco.asa.icmp_code": 0,
         "cisco.asa.mapped_source_ip": "10.0.55.66",
         "cisco.asa.message_id": "302021",