Skip to content

Synthetic source does not still support copy_to#653

Merged
salvatore-campagna merged 12 commits intoelastic:8.15from
salvatore-campagna:backport/security-message-copy-to
Sep 5, 2024
Merged

Synthetic source does not still support copy_to#653
salvatore-campagna merged 12 commits intoelastic:8.15from
salvatore-campagna:backport/security-message-copy-to

Conversation

@salvatore-campagna
Copy link
Contributor

This is a backport of #652 to 8.15.

When using logsdb index mode copy_to is disabled because it is
not supported by synthetic source. So we need to change queries
so to reflect the fact that the message field would be empty.
salvatore-campagna and others added 11 commits September 3, 2024 12:19
This is done since copy_to does not work in synthetic source and the
message field would be empty.
We also introduce a track parameter which we can use to select
the workflow directory to use to read workflow queries. The default
is `workflows` that is the existing one. Using `workflows-logsdb`
allows us to use workflow queries which do not realy on the usage of
copy_to used by the metricbeat template.

This workaround is introduced to deal with synthetic source (and logsdb)
not supporting copy_to. Once support for copy_to is available we will
revert this change and rely on the existing and default workflows.
@salvatore-campagna salvatore-campagna merged commit 4bdaf2c into elastic:8.15 Sep 5, 2024
salvatore-campagna added a commit to salvatore-campagna/rally-tracks that referenced this pull request Sep 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

Comments