Add support for Filestream input in elastic agent. #24820
Conversation
Add support for the filestream input and regenerate the spec. ``` inputs: - type: filestream ```
botelastic
bot
added
needs_team
💚 Build Succeeded
Expand to view the summary
Build stats
Test stats 🧪
Trends 🧪💚 Flaky test reportTests succeeded. Expand to view the summary
Test stats 🧪
|
| @@ -80,6 +80,7 @@ rules: | |||
| - udp | |||
| - unix | |||
| - winlog | |||
| - filestream | |||
There was a problem hiding this comment.
Do we want to expose it as filestream, or event/filestream via the mapper?
There was a problem hiding this comment.
Good point, I don't have a preference, event/filestream seems like a good idea? @mostlyjason @ruflin ?
There was a problem hiding this comment.
No strong preference on my end. Main downside of the prefix is that it is more cumbersome to type and harder to remember?
There was a problem hiding this comment.
I would like us to maintain some kind of consistency for input names that are available via Agent. Unfortunately Filebeat input naming is not really consistent with the other Beats and even within Filebeat. As the input is not GA input I'm okay to keep it named filestream.
We already have event/log and the logfile inputs, each translating to logs. We will eventually replace logs with filestream. The filestream input is not 100% bc, that is we will also have to think about migration.
There was a problem hiding this comment.
Agree with the proposal @urso, can you give a final review on this PR?
* Add support for Filestream input in elastic agent. Add support for the filestream input and regenerate the spec. ``` inputs: - type: filestream ``` (cherry picked from commit 54f5cbf)
* upstream/master: (91 commits) [Filebeat] Change okta.target to nested field (elastic#24636) Add RFC5424 format support for syslog input (elastic#23954) Fix links to Beats product pages (elastic#24821) [DOCS] Fix 'make setup' instructions for a new beat (elastic#24944) Remove duplicate decode_xml entry (elastic#24941) [libbeat] Add wineventlog schema to decode_xml processor (elastic#24726) [Elastic Agent] Add check for URL set when cert and cert key. (elastic#24904) feat: stage execution cache (elastic#24780) Fix error in Journalbeat commands (elastic#24880) Add baseline ECS 1.9.0 upgrade (elastic#24909) [Elastic Agent] Cloud container legacy apm files. (elastic#24896) [Elastic Agent]: Reduce allowed socket path length (elastic#24914) Add ability to destroy indices with wildcards in testing (elastic#24915) Add status subcommand to report status of running daemon. (elastic#24856) Fix types of fields GetHits and Ops in Metricbeat module for Couchbase (elastic#23287) Add support for Filestream input in elastic agent. (elastic#24820) Implement k8s secrets provider for Agent (elastic#24789) Sort processor list in docs (elastic#24874) Add support for SCRAM authentication in kafka metricbeat module (elastic#24810) Properly update offset in case of unparasable line (elastic#22685) ...
Add support for the filestream input and regenerate the spec.
What does this PR do?
Why is it important?
Checklist
CHANGELOG.next.asciidocorCHANGELOG-developer.next.asciidoc.Author's Checklist
How to test this PR locally
Related issues
Use cases
Screenshots
Logs