Skip to content

feat: Preserve event.original when pipeline errors in integration-experience integrations (part 3) #15805

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Draft
wants to merge 1 commit into
base: main
Choose a base branch
from
Draft

feat: Preserve event.original when pipeline errors in integration-experience integrations (part 3) #15805

wants to merge 1 commit into from

Conversation

@taylor-swanson
Copy link
Contributor

@taylor-swanson taylor-swanson commented Oct 29, 2025 •
edited
Loading

Proposed commit message

  • Add append processor to pipeline on_failure handlers to preserve event.original.
  • Add append processor to pipeline to preserve event.original if error.message is set.

Integrations

  • imperva
  • iptables
  • juniper_srx
  • modsecurity
  • netflow
  • panw
  • pfsense
  • proxysg
  • qnap_nas
  • snort
  • sonicwall_firewall

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
    - [ ] I have verified that any added dashboard complies with Kibana's Dashboard good practices

Related issues

@taylor-swanson taylor-swanson self-assigned this Oct 29, 2025
@taylor-swanson taylor-swanson added enhancement New feature or request Team:Integration-Experience Security Integrations Integration Experience [elastic/integration-experience] labels Oct 29, 2025
@taylor-swanson taylor-swanson force-pushed the chore/event-original-part3 branch from b739eed to eea70e5 Compare October 29, 2025 17:36
@taylor-swanson taylor-swanson added Integration:panw Palo Alto Next-Gen Firewall Integration:iptables Iptables Integration:snort Snort Integration:sonicwall_firewall SonicWall Firewall Integration:imperva Imperva Integration:juniper_srx Juniper SRX Integration:netflow NetFlow Records Integration:modsecurity ModSecurity Audit (Community supported) Integration:pfsense pfSense (Community supported) Integration:qnap_nas QNAP NAS (Community supported) Integration:proxysg Broadcom ProxySG labels Oct 29, 2025
@taylor-swanson
feat: Preserve event.original when errors occur in pipelines
c1a52e3 
- Added append processor to global on_failure to preserve event original
- Added append processor to default pipelines to preserve event original if error.message is set

Affects the following integrations:

- imperva
- iptables
- juniper_srx
- modsecurity
- netflow
- panw
- pfsense
- proxysg
- qnap_nas
- snort
- sonicwall_firewall
@taylor-swanson taylor-swanson force-pushed the chore/event-original-part3 branch from eea70e5 to c1a52e3 Compare October 29, 2025 17:48
@elasticmachine
Copy link

💚 Build Succeeded

cc @taylor-swanson

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@taylor-swanson taylor-swanson

Labels

enhancement New feature or request Integration:imperva Imperva Integration:iptables Iptables Integration:juniper_srx Juniper SRX Integration:modsecurity ModSecurity Audit (Community supported) Integration:netflow NetFlow Records Integration:panw Palo Alto Next-Gen Firewall Integration:pfsense pfSense (Community supported) Integration:proxysg Broadcom ProxySG Integration:qnap_nas QNAP NAS (Community supported) Integration:snort Snort Integration:sonicwall_firewall SonicWall Firewall Team:Integration-Experience Security Integrations Integration Experience [elastic/integration-experience]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@taylor-swanson @elasticmachine