-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
x-pack/filebeat/input/http_endpoint: generalise event path using CEL #38193
Conversation
14c2a04
to
11031ab
Compare
Pinging @elastic/security-service-integrations (Team:Security-Service Integrations) |
732061d
to
7ffb35a
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@efd6 Linter errors & Conflict needs to be resolved, otherwise LGTM
Allow users to handle events where multiple events are provided via single JSON objects in an array field. This is enabled by providing an optional CEL program with only minimal support for CEL evaluations; no extensions from the mito lib extensions are made available.
7ffb35a
to
390abde
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
💚 Build Succeeded
History
cc @efd6 |
💚 Build Succeeded
History
cc @efd6 |
💚 Build Succeeded
History
cc @efd6 |
💚 Build Succeeded
History
cc @efd6 |
💔 Build Failed
Failed CI StepsHistory
cc @efd6 |
💔 Build Failed
Failed CI StepsHistory
cc @efd6 |
Proposed commit message
Allow users to handle events where multiple events are provided via single JSON objects in an array field. This is enabled by providing an optional CEL program with only minimal support for CEL evaluations; no extensions from the mito lib extensions are made available.
Checklist
CHANGELOG.next.asciidoc
orCHANGELOG-developer.next.asciidoc
.Author's Checklist
How to test this PR locally
Related issues
Use cases
Screenshots
Logs