Skip to content

[Azure frontdoor] Add Health Probe dataset#20016

Open
herrBez wants to merge 6 commits into
elastic:mainfrom
herrBez:azure-frontdoor-healthprobes
Open

[Azure frontdoor] Add Health Probe dataset#20016
herrBez wants to merge 6 commits into
elastic:mainfrom
herrBez:azure-frontdoor-healthprobes

Conversation

@herrBez

@herrBez herrBez commented Jul 7, 2026

Copy link
Copy Markdown
Contributor

Proposed commit message

Add first support for Frontdoor health probe logs

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • Double check the documentation
  • Decide whether to activate the dataset by default or not (currently it's active by default)

How to test this PR locally

  • Configure an Azure Frontdoor and export the logs to an Eventhub
  • Configure the integration
  • Verify that Health Check logs are collected

Related issues

Screenshots

image

@herrBez herrBez requested review from a team as code owners July 7, 2026 11:41
@github-actions

github-actions Bot commented Jul 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

✅ Elastic Docs Style Checker (Vale)

No issues found on modified lines!

The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

@andrewkroh andrewkroh added Integration:azure_frontdoor Azure Frontdoor (Community supported) Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] labels Jul 7, 2026
@infra-vault-gh-plugin-prod

infra-vault-gh-plugin-prod Bot commented Jul 7, 2026

Copy link
Copy Markdown

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@vera-review-bot

vera-review-bot Bot commented Jul 7, 2026

Copy link
Copy Markdown

No issues across the latest commits ca61077.

A new commit triggers another review — at most once every 15 minutes. I skip the PR while it's approved or has merge conflicts.

🤖 AI-Generated Review | Vera Review Bot | 📚 Knowledge base: integration-skills

⚠️ Automated review — verify suggestions before applying.

@elastic-vault-github-plugin-prod

elastic-vault-github-plugin-prod Bot commented Jul 7, 2026

Copy link
Copy Markdown

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@infra-vault-gh-plugin-prod

infra-vault-gh-plugin-prod Bot commented Jul 7, 2026

Copy link
Copy Markdown

💚 Build Succeeded

efd6
efd6 reviewed Jul 8, 2026
View reviewed changes

@efd6 efd6 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you update the README?

Comment thread packages/azure_frontdoor/data_stream/health_probe/_dev/test/pipeline/test-common-config.yml
Comment on lines +1 to +2
dynamic_fields:
"event.ingested": ".*"

@efd6 efd6 Jul 8, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

event.ingested is not being set in the pipeline tests, so we don't need this.

@herrBez herrBez Jul 8, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks. Yes, you are right. I copied from the other datasets, but it's probably a legacy think. Let me fix it :)

Comment thread packages/azure_frontdoor/data_stream/health_probe/elasticsearch/ingest_pipeline/default.yml Outdated
Comment thread packages/azure_frontdoor/data_stream/health_probe/elasticsearch/ingest_pipeline/default.yml Outdated
Comment thread packages/azure_frontdoor/data_stream/health_probe/elasticsearch/ingest_pipeline/default.yml Outdated
Comment thread packages/azure_frontdoor/data_stream/health_probe/elasticsearch/ingest_pipeline/default.yml
Comment on lines +161 to +165
- geoip:
field: destination.ip
target_field: destination.geo
ignore_missing: true
- geoip:

@efd6 efd6 Jul 8, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Always use an if condition for field presence for geoip processors.

@herrBez @efd6
Apply suggestions from code review
9669a03 
Co-authored-by: Dan Kortschak <dan.kortschak@elastic.co>
@elastic-vault-github-plugin-prod

elastic-vault-github-plugin-prod Bot commented Jul 8, 2026

Copy link
Copy Markdown

✅ All changelog entries have the correct PR link.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@efd6 efd6 efd6 left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

Integration:azure_frontdoor Azure Frontdoor (Community supported) Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@herrBez @efd6 @andrewkroh