Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[AWS] Introduce ignore_older & start_timestamp #11919

Open
Kavindu-Dodan opened this issue Nov 28, 2024 · 3 comments
Open

[AWS] Introduce ignore_older & start_timestamp #11919

Kavindu-Dodan opened this issue Nov 28, 2024 · 3 comments
Assignees
Labels
Integration:aws_logs Custom AWS Logs Integration:aws AWS Team:obs-ds-hosted-services Label for the Observability Hosted Services team [elastic/obs-ds-hosted-services] Team:Security-Service Integrations Security Service Integrations Team [elastic/security-service-integrations]

Comments

@Kavindu-Dodan
Copy link
Contributor

Kavindu-Dodan commented Nov 28, 2024

Background

This issue is to track and upgrade AWS log integrations that utilize filebeat with ignore_older & start_timestamp introduced through elastic/beats#41817.

With the mentioned properties, users can control S3 (or S3 compatible) polling based log ingestion and improve filebeat registry memory usage.

AC

Once elastic/beats#41817 is merged, expose the above-mentioned properties through relevant integrations.

Note - Configurations will be released with beats 8.18.0

@lucabelluccini
Copy link
Contributor

Hello @Kavindu-Dodan

Thank you for the work on this enhancement already on Beats.

Please try to reach out integration developers who use the aws-s3 input (with polling mode) in their integrations to notify them about the new settings available in 8.18.0

One key integration which would possibly benefit from this is https://www.elastic.co/guide/en/integrations/current/cloudflare_logpush.html#cloudflare_logpush-to-collect-data-from-s3-compatible-cloudflare-r2-buckets-follow-the-below-steps

@Kavindu-Dodan Kavindu-Dodan added Team:obs-ds-hosted-services Label for the Observability Hosted Services team [elastic/obs-ds-hosted-services] Team:Security-Service Integrations Security Service Integrations Team [elastic/security-service-integrations] labels Jan 13, 2025
@elasticmachine
Copy link

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@Kavindu-Dodan
Copy link
Contributor Author

@lucabelluccini Good point. New configurations introduced at Beats are related to any integration that use S3 input for data ingestion. Most of the related integrations belong to my team. And I have added the team label that maintains the Cloudflare logs integrations.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Integration:aws_logs Custom AWS Logs Integration:aws AWS Team:obs-ds-hosted-services Label for the Observability Hosted Services team [elastic/obs-ds-hosted-services] Team:Security-Service Integrations Security Service Integrations Team [elastic/security-service-integrations]
Projects
None yet
Development

No branches or pull requests

4 participants