address pr comments

elastic · Apr 25, 2024 · a711a23 · a711a23
1 parent 2deeca0
commit a711a23
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/packages/entityanalytics_ad/data_stream/user/elasticsearch/ingest_pipeline/default.yml b/packages/entityanalytics_ad/data_stream/user/elasticsearch/ingest_pipeline/default.yml
@@ -14,7 +14,7 @@ processors:
   - pipeline:
       name: '{{ IngestPipeline "marker" }}'
       if: ctx.activedirectory == null
-      tag: pipeline_entity
+      tag: pipeline_marker
       ignore_missing_pipeline: true
 
   - script:

diff --git a/packages/entityanalytics_ad/data_stream/user/elasticsearch/ingest_pipeline/entity.yml b/packages/entityanalytics_ad/data_stream/user/elasticsearch/ingest_pipeline/entity.yml
@@ -153,12 +153,14 @@ processors:
       copy_from: activedirectory.user.name
       ignore_empty_value: true
   - gsub:
+      tag: gsub_user_dn
       field: activedirectory.user.distinguished_name
       pattern: '^.*?DC='
       replacement: ''
       target_field: user.domain
       if: ctx.activedirectory?.user?.distinguished_name != null
   - gsub:
+      tag: gsub_user_domain
       field: user.domain
       pattern: ',DC='
       replacement: '.'