diff --git a/packages/apache/_dev/build/docs/README.md b/packages/apache/_dev/build/docs/README.md index f57e928c13e..932b335cd78 100644 --- a/packages/apache/_dev/build/docs/README.md +++ b/packages/apache/_dev/build/docs/README.md @@ -32,3 +32,21 @@ generated by the `mod_status` module. {{event "status"}} {{fields "status"}} + +## ML Modules + +These anomaly detection jobs are available in the Machine Learning app in Kibana +when you have data that matches the query specified in the +[manifest](https://github.com/elastic/integrations/blob/main/packages/apache/kibana/ml_module/apache-Logs-ml.json#L11). + +### Apache Access Logs + +Find unusual activity in HTTP access logs. + +| Job | Description | +|---|---| +| visitor_rate_apache | HTTP Access Logs: Detect unusual visitor rates | +| status_code_rate_apache | HTTP Access Logs: Detect unusual status code rates | +| source_ip_url_count_apache | HTTP Access Logs: Detect unusual source IPs - high distinct count of URLs | +| source_ip_request_rate_apache | HTTP Access Logs: Detect unusual source IPs - high request rates | +| low_request_rate_apache | HTTP Access Logs: Detect low request rates | diff --git a/packages/apache/changelog.yml b/packages/apache/changelog.yml index d8fdafddc9b..b9782d32972 100644 --- a/packages/apache/changelog.yml +++ b/packages/apache/changelog.yml @@ -1,4 +1,9 @@ # newer versions go on top +- version: "1.3.5" + changes: + - description: Add ML modules to readme + type: enhancement + link: https://github.com/elastic/integrations/pull/2640 - version: "1.3.4" changes: - description: Regenerate test files using the new GeoIP database diff --git a/packages/apache/docs/README.md b/packages/apache/docs/README.md index d00e556d057..62a230bd596 100644 --- a/packages/apache/docs/README.md +++ b/packages/apache/docs/README.md @@ -384,3 +384,21 @@ An example event for `status` looks as following: | service.address | Address where data about this service was collected from. This should be a URI, network address (ipv4:port or [ipv6]:port) or a resource path (sockets). | keyword | | | | service.type | The type of the service data is collected from. The type can be used to group and correlate logs and metrics from one service type. Example: If logs or metrics are collected from Elasticsearch, `service.type` would be `elasticsearch`. | keyword | | | + +## ML Modules + +These anomaly detection jobs are available in the Machine Learning app in Kibana +when you have data that matches the query specified in the +[manifest](https://github.com/elastic/integrations/blob/main/packages/apache/kibana/ml_module/apache-Logs-ml.json#L11). + +### Apache Access Logs + +Find unusual activity in HTTP access logs. + +| Job | Description | +|---|---| +| visitor_rate_apache | HTTP Access Logs: Detect unusual visitor rates | +| status_code_rate_apache | HTTP Access Logs: Detect unusual status code rates | +| source_ip_url_count_apache | HTTP Access Logs: Detect unusual source IPs - high distinct count of URLs | +| source_ip_request_rate_apache | HTTP Access Logs: Detect unusual source IPs - high request rates | +| low_request_rate_apache | HTTP Access Logs: Detect low request rates | diff --git a/packages/apache/manifest.yml b/packages/apache/manifest.yml index 9cca4419584..fb300c6d2be 100644 --- a/packages/apache/manifest.yml +++ b/packages/apache/manifest.yml @@ -1,7 +1,7 @@ format_version: 1.0.0 name: apache title: Apache HTTP Server -version: 1.3.4 +version: 1.3.5 license: basic description: Collect logs and metrics from Apache servers with Elastic Agent. type: integration