Skip to content

output normalization for AWS cloudtrail logs - #3301

Merged
patel-bhavin merged 24 commits into
developfrom
output_normalization_aws
Mar 13, 2025
Merged

output normalization for AWS cloudtrail logs#3301
patel-bhavin merged 24 commits into
developfrom
output_normalization_aws

Conversation

@P4T12ICK

Copy link
Copy Markdown
Collaborator

output normalization for AWS cloudtrail logs

@P4T12ICKP4T12ICK added the WIP DO NOT MERGE Work in Progress label Jan 30, 2025
@ljstella

Copy link
Copy Markdown
Contributor

Started splunk/contentctl#361 to track the code changes for this. Changing the CI to use that branch will clear the errors for extra fields.

There is/will be conflict at some point with the PR from the Snapattack folks here: #3287 and the associated contentctl changes to accommodate that.

I think this looks good so far but there's a lot of questions about how we're going to use these that might make us want to change this up a bit.

@P4T12ICKP4T12ICK removed the WIP DO NOT MERGE Work in Progress label Feb 18, 2025

@ljstellaljstella left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Think this is fine for now- no mechanism for enforcement/validation yet (code is merged, but no release with it yet so this CI hasn't ran with it)

@patel-bhavin
patel-bhavin merged commit b99d558 into developMar 13, 2025
@patel-bhavin
patel-bhavin deleted the output_normalization_aws branch March 13, 2025 19:08
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@P4T12ICK@ljstella@patel-bhavin