tines: ensure event.kind is correctly set for pipeline errors (#6655)

elastic · Jun 21, 2023 · cf30a37 · cf30a37
1 parent 73fc1f0
commit cf30a37
Show file tree

Hide file tree

Showing 4 changed files with 18 additions and 7 deletions.
diff --git a/packages/tines/changelog.yml b/packages/tines/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "0.5.0"
+  changes:
+    - description: Ensure event.kind is correctly set for pipeline errors.
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/6655
 - version: "0.4.0"
   changes:
     - description: Update package to ECS 8.8.0.

diff --git a/packages/tines/data_stream/audit_logs/elasticsearch/ingest_pipeline/default.yml b/packages/tines/data_stream/audit_logs/elasticsearch/ingest_pipeline/default.yml
@@ -183,6 +183,9 @@ processors:
     ignore_missing: true
 
 on_failure:
-- set:
-    field: error.message
-    value: "{{ _ingest.on_failure_message }}"
+  - set:
+      field: event.kind
+      value: pipeline_error
+  - append:
+      field: error.message
+      value: '{{{ _ingest.on_failure_message }}}'
diff --git a/packages/tines/data_stream/time_saved/elasticsearch/ingest_pipeline/default.yml b/packages/tines/data_stream/time_saved/elasticsearch/ingest_pipeline/default.yml
@@ -72,6 +72,9 @@ processors:
     ignore_missing: true
 
 on_failure:
-- set:
-    field: error.message
-    value: "{{ _ingest.on_failure_message }}"
+  - set:
+      field: event.kind
+      value: pipeline_error
+  - append:
+      field: error.message
+      value: '{{{ _ingest.on_failure_message }}}'
diff --git a/packages/tines/manifest.yml b/packages/tines/manifest.yml
@@ -1,7 +1,7 @@
 format_version: 2.7.0
 name: tines
 title: "Tines"
-version: "0.4.0"
+version: "0.5.0"
 description: "Tines Logs & Time Saved Reports"
 type: integration
 categories: