gigamon: add CEF/UDP input to ami data stream#18402
gigamon: add CEF/UDP input to ami data stream#18402sanjay-2307 wants to merge 1 commit intoelastic:mainfrom
Conversation
|
💚 CLA has been signed |
ReviewersBuildkite won't run for external contributors automatically; you need to add a comment:
NOTE: https://github.com/elastic/integrations/blob/main/.buildkite/pull-requests.json contains all those details. |
3c3e011 to
df66721
Compare
|
/test |
|
Pinging @elastic/integration-experience (Team:Integration-Experience) |
💔 Build Failed
Failed CI StepsHistory |
df66721 to
32d4883
Compare
|
@kcreddy could you please drop a comment to initiate the test ? |
|
/test |
|
@kcreddy we noticed a few fields that still need to be renamed or dropped. I’ll update those early next week, and then you can proceed with merging the PR. |
@sanjay-2307, I've moved this PR to draft til then. You can mark it
GIgamon used to be owned by our team, but recently there was a change in ownership. Once the owned team approves the PR, then only it can be merged. |
WHAT:
Adds a UDP input for CEF log ingestion to the existing Gigamon AMI
data stream alongside the existing HTTP Endpoint (JSON) input.
WHY:
Gigamon AMI supports two output formats - JSON over HTTP and CEF over
UDP. The existing package only supported JSON. This change adds CEF
support within the same data stream so both inputs share the same
index, ECS mappings, and dashboards.