├── .buildkite ├── hooks │ ├── post-checkout │ ├── pre-command │ └── pre-exit ├── pipeline.test-with-integrations-repo.yml ├── pipeline.trigger.compliance.tests.sh ├── pipeline.yml ├── pull-requests.json └── scripts │ ├── install_deps.sh │ ├── run-installer-compliance.sh │ ├── run-linux-tests.sh │ ├── run-win-tests.ps1 │ ├── test-with-integrations.sh │ └── tooling.sh ├── .github ├── CODEOWNERS ├── ISSUE_TEMPLATE │ └── Change_Proposal.md ├── PULL_REQUEST_TEMPLATE.md ├── dependabot.yml └── workflows │ ├── add-issues-to-ingest-board.yml │ └── catalog-info.yml ├── .gitignore ├── .go-version ├── .mergify.yml ├── CONTRIBUTING.md ├── LICENSE.txt ├── Makefile ├── README.md ├── catalog-info.yaml ├── code └── go │ ├── Makefile │ ├── internal │ ├── fspath │ │ └── fspath.go │ ├── linkedfiles │ │ ├── fs.go │ │ └── linkedfiles.go │ ├── loader │ │ └── spec.go │ ├── packages │ │ ├── package.go │ │ └── package_test.go │ ├── pkgpath │ │ └── files.go │ ├── spec_test.go │ ├── specpatch │ │ └── spec_patch.go │ ├── specschema │ │ ├── folder_item_spec.go │ │ ├── folder_schema_spec.go │ │ ├── folder_spec.go │ │ ├── load_test.go │ │ └── testdata │ │ │ ├── invalid-version-folder-patch │ │ │ ├── manifest.spec.yml │ │ │ └── spec.yml │ │ │ ├── invalid-version-patch │ │ │ ├── manifest.spec.yml │ │ │ └── spec.yml │ │ │ ├── multiple-folder-versions │ │ │ ├── manifest.spec.yml │ │ │ └── spec.yml │ │ │ ├── multiple-versions │ │ │ ├── manifest.spec.yml │ │ │ └── spec.yml │ │ │ └── simple-spec │ │ │ ├── docs │ │ │ └── spec.yml │ │ │ ├── manifest.spec.yml │ │ │ └── spec.yml │ ├── spectypes │ │ ├── contenttype.go │ │ ├── contenttype_test.go │ │ ├── filesize.go │ │ ├── filesize_test.go │ │ ├── item.go │ │ ├── schema.go │ │ └── spectypes_test.go │ ├── validator │ │ ├── common │ │ │ ├── helpers.go │ │ │ └── helpers_test.go │ │ ├── content.go │ │ ├── folder_item_spec.go │ │ ├── folder_spec.go │ │ ├── semantic │ │ │ ├── testdata │ │ │ │ └── dashboards │ │ │ │ │ ├── apache-no-filter-encoded.json │ │ │ │ │ ├── apache-no-filter.json │ │ │ │ │ ├── mysql-filter-in-panels-encoded.json │ │ │ │ │ ├── mysql-filter-in-panels.json │ │ │ │ │ ├── nats-with-query-encoded.json │ │ │ │ │ ├── nats-with-query.json │ │ │ │ │ ├── tomcat-with-filter-encoded.json │ │ │ │ │ └── tomcat-with-filter.json │ │ │ ├── types.go │ │ │ ├── types_test.go │ │ │ ├── validate_capabilities_required.go │ │ │ ├── validate_changelog_links.go │ │ │ ├── validate_changelog_links_test.go │ │ │ ├── validate_date.go │ │ │ ├── validate_date_test.go │ │ │ ├── validate_dimensions.go │ │ │ ├── validate_dimensions_present.go │ │ │ ├── validate_dimensions_test.go │ │ │ ├── validate_external_fields_with_dev_folder.go │ │ │ ├── validate_external_fields_with_dev_folder_test.go │ │ │ ├── validate_field_groups.go │ │ │ ├── validate_field_groups_test.go │ │ │ ├── validate_fields_limits.go │ │ │ ├── validate_ilmpolicypresent.go │ │ │ ├── validate_kibana_filter_present.go │ │ │ ├── validate_kibana_filter_present_test.go │ │ │ ├── validate_kibana_matching_object_ids.go │ │ │ ├── validate_kibana_no_dangling_object_ids.go │ │ │ ├── validate_kibana_no_legacy_visualizations.go │ │ │ ├── validate_minimum_kibana_version.go │ │ │ ├── validate_minimum_kibana_version_test.go │ │ │ ├── validate_prerelease.go │ │ │ ├── validate_prerelease_test.go │ │ │ ├── validate_profiling_nonga.go │ │ │ ├── validate_required_fields.go │ │ │ ├── validate_required_vargroups.go │ │ │ ├── validate_required_vargroups_test.go │ │ │ ├── validate_routing_rules_and_dataset.go │ │ │ ├── validate_unique_fields.go │ │ │ ├── validate_version_integrity.go │ │ │ ├── validate_version_integrity_test.go │ │ │ ├── validate_visualizations_used_by_value.go │ │ │ ├── validate_visualizations_used_by_value_test.go │ │ │ └── warning.go │ │ ├── spec.go │ │ ├── spec_test.go │ │ └── testdata │ │ │ ├── fakespec │ │ │ └── fake │ │ │ │ ├── beta │ │ │ │ └── spec.yml │ │ │ │ ├── ga │ │ │ │ └── spec.yml │ │ │ │ ├── patches │ │ │ │ ├── data_stream │ │ │ │ │ ├── manifest.spec.yml │ │ │ │ │ ├── other.spec.yml │ │ │ │ │ └── spec.yml │ │ │ │ ├── manifest.spec.yml │ │ │ │ └── spec.yml │ │ │ │ └── spec.yml │ │ │ └── packages │ │ │ ├── features_beta │ │ │ ├── beta │ │ │ │ └── .empty │ │ │ ├── changelog.yml │ │ │ ├── ga │ │ │ │ └── .empty │ │ │ └── manifest.yml │ │ │ ├── features_ga │ │ │ ├── changelog.yml │ │ │ ├── ga │ │ │ │ └── .empty │ │ │ └── manifest.yml │ │ │ ├── folder_spec_patches │ │ │ ├── changelog.yml │ │ │ ├── ga │ │ │ │ └── .empty │ │ │ ├── manifest.yml │ │ │ └── patches │ │ │ │ ├── manifest.yml │ │ │ │ └── other.yml │ │ │ └── folder_spec_patches_chain │ │ │ ├── changelog.yml │ │ │ ├── ga │ │ │ └── .empty │ │ │ ├── manifest.yml │ │ │ └── patches │ │ │ ├── data_stream │ │ │ └── manifest.yml │ │ │ ├── manifest.yml │ │ │ └── other.yml │ └── yamlschema │ │ ├── formatcheckers.go │ │ ├── loader.go │ │ ├── mapstr.go │ │ ├── schema_loader.go │ │ └── schema_spec.go │ ├── pkg │ ├── specerrors │ │ ├── constants.go │ │ ├── errors.go │ │ ├── errors_test.go │ │ ├── exclude_checks.go │ │ ├── exclude_checks_test.go │ │ ├── filter.go │ │ ├── filter_test.go │ │ ├── processor.go │ │ ├── structured_error.go │ │ └── testdata │ │ │ └── validation.yml │ └── validator │ │ ├── limits_test.go │ │ ├── testdata │ │ ├── limits │ │ │ ├── changelog.yml │ │ │ ├── data_stream │ │ │ │ └── foo │ │ │ │ │ ├── fields │ │ │ │ │ └── base-fields.yml │ │ │ │ │ └── manifest.yml │ │ │ └── manifest.yml │ │ └── templates │ │ │ ├── integration_v1 │ │ │ ├── changelog.yml │ │ │ ├── data_stream │ │ │ │ └── test │ │ │ │ │ ├── agent │ │ │ │ │ └── stream │ │ │ │ │ │ └── stream.yml.hbs │ │ │ │ │ ├── fields │ │ │ │ │ └── base-fields.yml │ │ │ │ │ └── manifest.yml │ │ │ ├── docs │ │ │ │ └── README.md │ │ │ ├── img │ │ │ │ ├── sample-logo.svg │ │ │ │ └── sample-screenshot.png │ │ │ └── manifest.yml │ │ │ └── integration_v3 │ │ │ ├── LICENSE.txt │ │ │ ├── changelog.yml │ │ │ ├── data_stream │ │ │ └── test │ │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ │ └── manifest.yml │ │ │ ├── docs │ │ │ └── README.md │ │ │ ├── img │ │ │ ├── sample-logo.svg │ │ │ └── sample-screenshot.png │ │ │ └── manifest.yml │ │ ├── validator.go │ │ ├── validator_fields_test.go │ │ └── validator_test.go │ └── tools │ └── tools.go ├── compliance ├── .gitignore ├── Makefile ├── README.md ├── compliance_test.go ├── elasticpackage.go ├── elasticsearch.go ├── features │ ├── ai.feature │ ├── basic.feature │ ├── field-types.feature │ ├── runtime-fields.feature │ ├── subobjects.feature │ ├── synthetic-source.feature │ └── transforms.feature ├── go.mod ├── go.sum ├── indextemplate.go ├── kibana.go ├── testdata │ └── packages │ │ ├── basic_content │ │ ├── changelog.yml │ │ ├── docs │ │ │ └── README.md │ │ ├── img │ │ │ ├── kibana-system.png │ │ │ └── system.svg │ │ ├── kibana │ │ │ ├── dashboard │ │ │ │ └── basic_content-dashboard-abc-1.json │ │ │ └── security_rule │ │ │ │ └── 12cea9e9-5766-474d-a9dc-34ef7c7677c7.json │ │ └── manifest.yml │ │ ├── basic_input │ │ ├── LICENSE.txt │ │ ├── agent │ │ │ └── input │ │ │ │ └── input.yml.hbs │ │ ├── changelog.yml │ │ ├── docs │ │ │ └── README.md │ │ ├── fields │ │ │ └── base-fields.yml │ │ ├── img │ │ │ ├── sample-logo.svg │ │ │ └── sample-screenshot.png │ │ └── manifest.yml │ │ ├── basic_integration │ │ ├── LICENSE.txt │ │ ├── changelog.yml │ │ ├── data_stream │ │ │ └── foo │ │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ │ └── manifest.yml │ │ ├── docs │ │ │ └── README.md │ │ ├── img │ │ │ ├── sample-logo.svg │ │ │ └── sample-screenshot.png │ │ └── manifest.yml │ │ ├── counted_keyword │ │ ├── LICENSE.txt │ │ ├── changelog.yml │ │ ├── data_stream │ │ │ └── foo │ │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── fields.yml │ │ │ │ └── manifest.yml │ │ ├── docs │ │ │ └── README.md │ │ ├── img │ │ │ ├── sample-logo.svg │ │ │ └── sample-screenshot.png │ │ └── manifest.yml │ │ ├── runtime_fields │ │ ├── LICENSE.txt │ │ ├── changelog.yml │ │ ├── data_stream │ │ │ └── foo │ │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ │ └── manifest.yml │ │ ├── docs │ │ │ └── README.md │ │ ├── img │ │ │ ├── sample-logo.svg │ │ │ └── sample-screenshot.png │ │ └── manifest.yml │ │ ├── subobjects_false │ │ ├── LICENSE.txt │ │ ├── changelog.yml │ │ ├── data_stream │ │ │ └── foo │ │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── fields.yml │ │ │ │ └── manifest.yml │ │ ├── docs │ │ │ └── README.md │ │ ├── img │ │ │ ├── sample-logo.svg │ │ │ └── sample-screenshot.png │ │ └── manifest.yml │ │ ├── transform │ │ ├── LICENSE.txt │ │ ├── changelog.yml │ │ ├── docs │ │ │ └── README.md │ │ ├── elasticsearch │ │ │ └── transform │ │ │ │ └── metadata_united │ │ │ │ ├── fields │ │ │ │ └── fields.yml │ │ │ │ ├── manifest.yml │ │ │ │ └── transform.yml │ │ ├── img │ │ │ ├── sample-logo.svg │ │ │ └── sample-screenshot.png │ │ └── manifest.yml │ │ └── transform_aliases │ │ ├── LICENSE.txt │ │ ├── changelog.yml │ │ ├── docs │ │ └── README.md │ │ ├── elasticsearch │ │ └── transform │ │ │ └── metadata_united │ │ │ ├── fields │ │ │ └── fields.yml │ │ │ ├── manifest.yml │ │ │ └── transform.yml │ │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ │ └── manifest.yml ├── tools.go └── version.go ├── go.mod ├── go.sum ├── spec.go ├── spec ├── changelog.yml ├── content │ ├── kibana │ │ └── spec.yml │ ├── manifest.spec.yml │ └── spec.yml ├── input │ ├── _dev │ │ ├── spec.yml │ │ └── test │ │ │ ├── config.spec.yml │ │ │ └── spec.yml │ ├── manifest.spec.yml │ └── spec.yml └── integration │ ├── _dev │ ├── benchmark │ │ ├── deploy │ │ │ └── spec.yml │ │ ├── rally.scenario.spec.yml │ │ ├── spec.yml │ │ └── system.scenario.spec.yml │ ├── build │ │ ├── build.spec.yml │ │ ├── docs │ │ │ └── spec.yml │ │ └── spec.yml │ ├── deploy │ │ ├── agent │ │ │ ├── custom-agent.spec.yml │ │ │ └── spec.yml │ │ ├── docker │ │ │ └── spec.yml │ │ ├── k8s │ │ │ └── spec.yml │ │ ├── spec.yml │ │ ├── tf │ │ │ ├── env.spec.yml │ │ │ ├── files │ │ │ │ └── spec.yml │ │ │ └── spec.yml │ │ └── variants.spec.yml │ ├── shared │ │ └── spec.yml │ ├── spec.yml │ └── test │ │ ├── config.spec.yml │ │ └── spec.yml │ ├── agent │ └── spec.yml │ ├── changelog.spec.yml │ ├── data_stream │ ├── _dev │ │ ├── benchmark │ │ │ ├── pipeline │ │ │ │ ├── config.spec.yml │ │ │ │ ├── event.spec.yml │ │ │ │ └── spec.yml │ │ │ └── spec.yml │ │ ├── spec.yml │ │ └── test │ │ │ ├── config.spec.yml │ │ │ ├── pipeline │ │ │ ├── common_config.spec.yml │ │ │ ├── config_json.spec.yml │ │ │ ├── config_raw.spec.yml │ │ │ ├── event.spec.yml │ │ │ ├── expected.spec.yml │ │ │ └── spec.yml │ │ │ ├── policy │ │ │ ├── config.spec.yml │ │ │ └── spec.yml │ │ │ ├── skip.spec.yml │ │ │ ├── spec.yml │ │ │ ├── static │ │ │ ├── config.spec.yml │ │ │ └── spec.yml │ │ │ └── system │ │ │ ├── config.spec.yml │ │ │ └── spec.yml │ ├── agent │ │ └── spec.yml │ ├── fields │ │ ├── fields.spec.yml │ │ └── spec.yml │ ├── lifecycle.spec.yml │ ├── manifest.spec.yml │ ├── routing_rules.spec.yml │ └── spec.yml │ ├── docs │ └── spec.yml │ ├── elasticsearch │ ├── pipeline.spec.yml │ ├── spec.yml │ └── transform │ │ ├── manifest.spec.yml │ │ ├── spec.yml │ │ └── transform.spec.yml │ ├── img │ └── spec.yml │ ├── kibana │ ├── spec.yml │ └── tags.spec.yml │ ├── manifest.spec.yml │ ├── spec.yml │ └── validation.spec.yml ├── test └── packages │ ├── bad_additional_content │ ├── bad-bad │ │ └── README.md │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_configuration_links │ ├── LICENSE.txt │ ├── NOTICE.txt │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── kibana-system.png │ │ ├── metricbeat_system_dashboard.png │ │ └── system.svg │ └── manifest.yml │ ├── bad_custom_ilm_policy │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── test │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ ├── ilm │ │ │ │ └── diagnostics.json │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_dangling_object_ids │ ├── LICENSE.txt │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ ├── kibana │ │ ├── dashboard │ │ │ └── bad_dangling_object_ids-82273ffe-6acc-4f2f-bbee-c1004abba63d.json │ │ └── search │ │ │ ├── bad_dangling_object_ids-5e1a01ff-6f9a-41c1-b7ad-326472db42b6.json │ │ │ └── bad_dangling_object_ids-8287a5d5-1576-4f3a-83c4-444e9058439b.json │ ├── manifest.yml │ └── validation.yml │ ├── bad_data_stream_name │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── integration │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_deploy_variants │ ├── _dev │ │ ├── build │ │ │ └── build.yml │ │ └── deploy │ │ │ ├── docker │ │ │ └── docker-compose.yml │ │ │ └── variants.yml │ ├── changelog.yml │ ├── data_stream │ │ └── foo │ │ │ ├── fields │ │ │ ├── base_fields.yml │ │ │ └── fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ └── manifest.yml │ ├── bad_deployment_mode │ ├── LICENSE.txt │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_deployment_mode_resources │ ├── LICENSE.txt │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_deployment_mode_without_identities │ ├── LICENSE.txt │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_dotted_fields │ ├── LICENSE.txt │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_duplicated_fields │ ├── _dev │ │ └── build │ │ │ └── build.yml │ ├── changelog.yml │ ├── data_stream │ │ ├── good │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ │ └── wrong │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ └── ecs.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_duplicated_fields_input │ ├── LICENSE.txt │ ├── _dev │ │ └── build │ │ │ └── build.yml │ ├── agent │ │ └── input │ │ │ └── input.yml.hbs │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── fields │ │ ├── base-fields.yml │ │ └── ecs.yml │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_external_without_dev_build │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── foo │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ └── ecs.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_github_owner │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_group_unit │ ├── changelog.yml │ ├── data_stream │ │ ├── bar │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── hello-world.yml │ │ │ └── manifest.yml │ │ └── foo │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ ├── bad-file.yml │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_ingest_pipeline │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ ├── bad_rename_message │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ │ ├── bad_rename_message_2 │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ │ └── test │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ ├── manifest.yml │ └── validation.yml │ ├── bad_input_dataset_vars │ ├── LICENSE.txt │ ├── _dev │ │ └── test │ │ │ └── policy │ │ │ └── test-vars.yml │ ├── agent │ │ └── input │ │ │ └── input.yml.hbs │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── fields │ │ └── base-fields.yml │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_integration_dataset_vars │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── datasets │ │ │ ├── _dev │ │ │ └── test │ │ │ │ └── system │ │ │ │ └── test-vars-config.yml │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_kibana_ids │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── kibana │ │ ├── dashboard │ │ │ └── bad_kibana_ids-bar-baz.json │ │ └── security_rule │ │ │ └── bad_kibana_ids-bar-baz.json │ └── manifest.yml │ ├── bad_lifecycle │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── test │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ ├── lifecycle.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_missing_capability_security_rules │ ├── LICENSE.txt │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ ├── kibana │ │ └── security_rule │ │ │ ├── 000047bb-b27a-47ec-8b62-ef1a5d2c9e19.json │ │ │ └── 000047bb-b27a-47ec-8b62-ef1a5d2c9e19_5.json │ └── manifest.yml │ ├── bad_owner_type │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_owner_type_missing │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_policy_template_behavior │ ├── LICENSE.txt │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_profiling_symbolizer │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── example │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_release_tag │ ├── LICENSE.txt │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_required_vars │ ├── LICENSE.txt │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_required_vars_data_streams │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── test │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_routing_rules │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── rules │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ ├── manifest.yml │ │ │ └── routing_rules.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_routing_rules_missing_if │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── rules │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ ├── manifest.yml │ │ │ └── routing_rules.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_routing_rules_missing_target_dataset │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── rules │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ ├── manifest.yml │ │ │ └── routing_rules.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_routing_rules_wrong_spec │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── rules │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ ├── manifest.yml │ │ │ └── routing_rules.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_rule_ids │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── kibana │ │ └── security_rule │ │ │ └── saved_object_id.json │ └── manifest.yml │ ├── bad_runtime_kibana_version │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── foo │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ └── fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_saved_object_tags │ ├── LICENSE.txt │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ ├── kibana │ │ └── tags.yml │ └── manifest.yml │ ├── bad_saved_object_tags_kibana_version │ ├── LICENSE.txt │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ ├── kibana │ │ └── tags.yml │ └── manifest.yml │ ├── bad_secret_vars │ ├── LICENSE.txt │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_secret_vars_v3 │ ├── LICENSE.txt │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_select │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── foo_stream │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── bad_skip_ignored_fields │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── foo │ │ │ ├── _dev │ │ │ └── test │ │ │ │ └── system │ │ │ │ └── test-default-config.yml │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── custom_ilm_policy │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── test │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ ├── ilm │ │ │ │ └── diagnostics.json │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── custom_logs │ ├── agent │ │ └── input │ │ │ └── input.yml.hbs │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── fields │ │ ├── base-fields.yml │ │ └── input.yml │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── deploy_custom_agent │ ├── _dev │ │ └── deploy │ │ │ └── agent │ │ │ └── custom-agent.yml │ ├── changelog.yml │ ├── data_stream │ │ └── foo │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ └── fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ └── manifest.yml │ ├── deploy_custom_agent_invalid_property │ ├── _dev │ │ └── deploy │ │ │ └── agent │ │ │ └── custom-agent.yml │ ├── changelog.yml │ ├── data_stream │ │ └── foo │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ └── fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ └── manifest.yml │ ├── deploy_custom_agent_multi_services │ ├── _dev │ │ └── build │ │ │ └── build.yml │ ├── changelog.yml │ ├── data_stream │ │ └── memory │ │ │ ├── _dev │ │ │ ├── deploy │ │ │ │ └── agent │ │ │ │ │ ├── Dockerfile │ │ │ │ │ └── custom-agent.yml │ │ │ └── test │ │ │ │ └── system │ │ │ │ └── test-memory-config.yml │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ ├── ecs.yml │ │ │ └── fields.yml │ │ │ ├── manifest.yml │ │ │ └── sample_event.json │ ├── docs │ │ └── README.md │ └── manifest.yml │ ├── deploy_docker │ ├── _dev │ │ └── deploy │ │ │ ├── docker │ │ │ ├── docker-compose.d │ │ │ │ └── hi.sh │ │ │ └── docker-compose.yml │ │ │ └── variants.yml │ ├── changelog.yml │ ├── data_stream │ │ └── foo │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ └── fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ └── manifest.yml │ ├── deploy_terraform │ ├── _dev │ │ └── deploy │ │ │ ├── tf │ │ │ ├── .terraform.lock.hcl │ │ │ ├── data.json │ │ │ ├── files │ │ │ │ ├── example.log │ │ │ │ └── test.gz.parquet │ │ │ ├── main.tf │ │ │ └── template.tftpl │ │ │ └── variants.yml │ ├── changelog.yml │ ├── data_stream │ │ └── foo │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ └── fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ └── manifest.yml │ ├── docs_extra_files │ ├── _dev │ │ └── build │ │ │ └── build.yml │ ├── changelog.yml │ ├── data_stream │ │ └── pe │ │ │ ├── fields │ │ │ ├── base_fields.yml │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ ├── .missing │ │ └── README.md │ └── manifest.yml │ ├── expanded │ ├── data_stream │ │ ├── foo │ │ │ ├── _dev │ │ │ │ └── test │ │ │ │ │ └── pipeline │ │ │ │ │ ├── test-access-event.json │ │ │ │ │ ├── test-access-event.json-expected.json │ │ │ │ │ ├── test-access-raw.log │ │ │ │ │ ├── test-access-raw.log-config.yml │ │ │ │ │ └── test-access-raw.log-expected.json │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ │ └── pe │ │ │ ├── fields │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── .empty │ └── manifest.yml │ ├── good │ ├── LICENSE.txt │ ├── NOTICE.txt │ ├── _dev │ │ ├── build │ │ │ ├── build.yml │ │ │ └── docs │ │ │ │ └── README.md │ │ └── deploy │ │ │ └── tf │ │ │ ├── .terraform.lock.hcl │ │ │ ├── data.json │ │ │ ├── main.tf │ │ │ └── template.tftpl │ ├── changelog.yml │ ├── data_stream │ │ ├── foo │ │ │ ├── _dev │ │ │ │ ├── benchmark │ │ │ │ │ └── pipeline │ │ │ │ │ │ ├── access-event.json │ │ │ │ │ │ ├── access-raw.log │ │ │ │ │ │ └── config.yml │ │ │ │ ├── deploy │ │ │ │ │ ├── docker │ │ │ │ │ │ ├── docker-compose.d │ │ │ │ │ │ │ └── hi.sh │ │ │ │ │ │ └── docker-compose.yml │ │ │ │ │ └── tf │ │ │ │ │ │ ├── .terraform.lock.hcl │ │ │ │ │ │ ├── data.json │ │ │ │ │ │ ├── main.tf │ │ │ │ │ │ ├── some-module.tf │ │ │ │ │ │ └── template.tftpl │ │ │ │ └── test │ │ │ │ │ ├── pipeline │ │ │ │ │ ├── test-access-event.json │ │ │ │ │ ├── test-access-event.json-expected.json │ │ │ │ │ ├── test-access-raw.log │ │ │ │ │ ├── test-access-raw.log-config.yml │ │ │ │ │ ├── test-access-raw.log-expected.json │ │ │ │ │ └── test-common-config.yml │ │ │ │ │ └── system │ │ │ │ │ └── test-default-config.yml │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ ├── external-fields.yml │ │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ │ ├── hidden_data_stream │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ │ ├── ilm_policy │ │ │ ├── elasticsearch │ │ │ │ └── ilm │ │ │ │ │ └── diagnostics.json │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ │ ├── k8s_data_stream │ │ │ ├── _dev │ │ │ │ └── deploy │ │ │ │ │ └── k8s │ │ │ │ │ └── shell-demo.yaml │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ │ ├── k8s_data_stream_no_definitions │ │ │ ├── _dev │ │ │ │ └── deploy │ │ │ │ │ └── k8s │ │ │ │ │ └── .empty │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ │ ├── pe │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ │ └── skipped_tests │ │ │ ├── _dev │ │ │ └── test │ │ │ │ ├── static │ │ │ │ └── test-default-config.yml │ │ │ │ └── system │ │ │ │ └── test-default-config.yml │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── elasticsearch │ │ ├── ingest_pipeline │ │ │ └── default.yml │ │ ├── ml_model │ │ │ └── good_ml_model_abc_1.json │ │ └── transform │ │ │ ├── good_example_abc_1 │ │ │ └── transform.yml │ │ │ ├── good_example_bdc_2 │ │ │ ├── manifest.yml │ │ │ └── transform.yml │ │ │ ├── metadata_current │ │ │ ├── fields │ │ │ │ └── fields.yml │ │ │ ├── manifest.yml │ │ │ └── transform.yml │ │ │ └── metadata_united │ │ │ ├── fields │ │ │ └── fields.yml │ │ │ ├── manifest.yml │ │ │ └── transform.yml │ ├── img │ │ ├── kibana-system.png │ │ ├── metricbeat_system_dashboard.png │ │ └── system.svg │ ├── kibana │ │ ├── csp_rule_template │ │ │ └── good-csp-rule-template-abc-1.json │ │ ├── dashboard │ │ │ └── good-dashboard-abc-1.json │ │ ├── lens │ │ │ └── good-lens-abc-1.json │ │ ├── map │ │ │ └── good-map-abc-1.json │ │ ├── ml_module │ │ │ └── good-ml-module-abc-1.json │ │ ├── osquery_pack_asset │ │ │ └── good-osquery-pack-asset-1.json │ │ ├── osquery_saved_query │ │ │ └── good-osquery-saved-query-1.json │ │ ├── search │ │ │ └── good-search-abc-1.json │ │ ├── security_rule │ │ │ ├── 000047bb-b27a-47ec-8b62-ef1a5d2c9e19.json │ │ │ └── 000047bb-b27a-47ec-8b62-ef1a5d2c9e19_5.json │ │ ├── tag │ │ │ └── good-tag-abc-1.json │ │ └── visualization │ │ │ └── good-visualization-abc-1.json │ └── manifest.yml │ ├── good_content │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── kibana-system.png │ │ └── system.svg │ ├── kibana │ │ ├── dashboard │ │ │ └── good_content-dashboard-abc-1.json │ │ ├── security_ai_prompt │ │ │ └── good_content-security-ai-prompt-1.json │ │ ├── security_rule │ │ │ └── 12cea9e9-5766-474d-a9dc-34ef7c7677c6.json │ │ └── slo │ │ │ └── good_content-slo-abc-1.json │ ├── manifest.yml │ └── validation.yml │ ├── good_input │ ├── LICENSE.txt │ ├── _dev │ │ ├── build │ │ │ ├── build.yml │ │ │ └── docs │ │ │ │ └── README.md │ │ ├── deploy │ │ │ └── tf │ │ │ │ ├── .terraform.lock.hcl │ │ │ │ ├── data.json │ │ │ │ ├── main.tf │ │ │ │ └── template.tftpl │ │ └── test │ │ │ ├── config.yml │ │ │ ├── policy │ │ │ ├── test-mysql.expected │ │ │ ├── test-mysql.yml │ │ │ ├── test-oracle.expected │ │ │ └── test-oracle.yml │ │ │ └── system │ │ │ └── test-default-config.yml │ ├── agent │ │ └── input │ │ │ └── input.yml.hbs │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── fields │ │ ├── base-fields.yml │ │ └── input.yml │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ ├── lifecycle.yml │ ├── manifest.yml │ └── sample_event.json │ ├── good_v2 │ ├── LICENSE.txt │ ├── NOTICE.txt │ ├── _dev │ │ ├── build │ │ │ ├── build.yml │ │ │ └── docs │ │ │ │ └── README.md │ │ └── deploy │ │ │ └── tf │ │ │ ├── .terraform.lock.hcl │ │ │ ├── data.json │ │ │ ├── main.tf │ │ │ └── template.tftpl │ ├── changelog.yml │ ├── data_stream │ │ ├── foo │ │ │ ├── _dev │ │ │ │ ├── benchmark │ │ │ │ │ └── pipeline │ │ │ │ │ │ ├── access-event.json │ │ │ │ │ │ ├── access-raw.log │ │ │ │ │ │ └── config.yml │ │ │ │ ├── deploy │ │ │ │ │ ├── docker │ │ │ │ │ │ ├── docker-compose.d │ │ │ │ │ │ │ └── hi.sh │ │ │ │ │ │ └── docker-compose.yml │ │ │ │ │ └── tf │ │ │ │ │ │ ├── .terraform.lock.hcl │ │ │ │ │ │ ├── data.json │ │ │ │ │ │ ├── main.tf │ │ │ │ │ │ ├── some-module.tf │ │ │ │ │ │ └── template.tftpl │ │ │ │ └── test │ │ │ │ │ ├── pipeline │ │ │ │ │ ├── test-access-event.json │ │ │ │ │ ├── test-access-event.json-expected.json │ │ │ │ │ ├── test-access-raw.log │ │ │ │ │ ├── test-access-raw.log-config.yml │ │ │ │ │ ├── test-access-raw.log-expected.json │ │ │ │ │ └── test-common-config.yml │ │ │ │ │ └── system │ │ │ │ │ └── test-default-config.yml │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ ├── external-fields.yml │ │ │ │ └── some_fields.yml │ │ │ ├── lifecycle.yml │ │ │ └── manifest.yml │ │ ├── hidden_data_stream │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ │ ├── ilm_policy │ │ │ ├── elasticsearch │ │ │ │ └── ilm │ │ │ │ │ └── diagnostics.json │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ │ ├── k8s_data_stream │ │ │ ├── _dev │ │ │ │ └── deploy │ │ │ │ │ └── k8s │ │ │ │ │ └── shell-demo.yaml │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ │ ├── k8s_data_stream_no_definitions │ │ │ ├── _dev │ │ │ │ └── deploy │ │ │ │ │ └── k8s │ │ │ │ │ └── .empty │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ │ ├── pe │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ │ ├── routing_rules │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ ├── manifest.yml │ │ │ └── routing_rules.yml │ │ └── skipped_tests │ │ │ ├── _dev │ │ │ └── test │ │ │ │ ├── static │ │ │ │ └── test-default-config.yml │ │ │ │ └── system │ │ │ │ └── test-default-config.yml │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── elasticsearch │ │ ├── ingest_pipeline │ │ │ └── default.yml │ │ ├── ml_model │ │ │ └── good_v2_ml_model_abc_1.json │ │ └── transform │ │ │ ├── good_example_abc_1 │ │ │ └── transform.yml │ │ │ ├── good_example_bdc_2 │ │ │ ├── manifest.yml │ │ │ └── transform.yml │ │ │ ├── metadata_current │ │ │ ├── fields │ │ │ │ └── fields.yml │ │ │ ├── manifest.yml │ │ │ └── transform.yml │ │ │ └── metadata_united │ │ │ ├── fields │ │ │ └── fields.yml │ │ │ ├── manifest.yml │ │ │ └── transform.yml │ ├── img │ │ ├── kibana-system.png │ │ ├── metricbeat_system_dashboard.png │ │ └── system.svg │ ├── kibana │ │ ├── csp_rule_template │ │ │ └── good_v2-csp-rule-template-abc-1.json │ │ ├── dashboard │ │ │ └── good_v2-dashboard-abc-1.json │ │ ├── lens │ │ │ └── good_v2-lens-abc-1.json │ │ ├── map │ │ │ └── good_v2-map-abc-1.json │ │ ├── ml_module │ │ │ └── good_v2-ml-module-abc-1.json │ │ ├── osquery_pack_asset │ │ │ └── good_v2-osquery-pack-asset-1.json │ │ ├── osquery_saved_query │ │ │ └── good_v2-osquery-saved-query-1.json │ │ ├── search │ │ │ └── good_v2-search-abc-1.json │ │ ├── security_rule │ │ │ └── 000047bb-b27a-47ec-8b62-ef1a5d2c9e19.json │ │ ├── tag │ │ │ └── good_v2-tag-abc-1.json │ │ ├── tags.yml │ │ └── visualization │ │ │ └── good_v2-visualization-abc-1.json │ └── manifest.yml │ ├── good_v3 │ ├── LICENSE.txt │ ├── NOTICE.txt │ ├── _dev │ │ ├── build │ │ │ ├── build.yml │ │ │ └── docs │ │ │ │ └── README.md │ │ ├── deploy │ │ │ └── tf │ │ │ │ ├── .terraform.lock.hcl │ │ │ │ ├── data.json │ │ │ │ ├── main.tf │ │ │ │ └── template.tftpl │ │ ├── shared │ │ │ └── base-fields.yml │ │ └── test │ │ │ └── config.yml │ ├── changelog.yml │ ├── data_stream │ │ ├── agent_settings │ │ │ ├── _dev │ │ │ │ └── test │ │ │ │ │ └── system │ │ │ │ │ └── test-default-config.yml │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ │ ├── ecs_import_mappings │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ │ ├── foo │ │ │ ├── _dev │ │ │ │ ├── benchmark │ │ │ │ │ └── pipeline │ │ │ │ │ │ ├── access-event.json │ │ │ │ │ │ ├── access-raw.log │ │ │ │ │ │ └── config.yml │ │ │ │ ├── deploy │ │ │ │ │ ├── docker │ │ │ │ │ │ ├── docker-compose.d │ │ │ │ │ │ │ └── hi.sh │ │ │ │ │ │ └── docker-compose.yml │ │ │ │ │ └── tf │ │ │ │ │ │ ├── .terraform.lock.hcl │ │ │ │ │ │ ├── data.json │ │ │ │ │ │ ├── main.tf │ │ │ │ │ │ ├── some-module.tf │ │ │ │ │ │ └── template.tftpl │ │ │ │ └── test │ │ │ │ │ ├── pipeline │ │ │ │ │ ├── test-access-event.json │ │ │ │ │ ├── test-access-event.json-expected.json │ │ │ │ │ ├── test-access-raw.log │ │ │ │ │ ├── test-access-raw.log-config.yml │ │ │ │ │ ├── test-access-raw.log-expected.json │ │ │ │ │ └── test-common-config.yml │ │ │ │ │ ├── policy │ │ │ │ │ ├── test-default.expected │ │ │ │ │ └── test-default.yml │ │ │ │ │ └── system │ │ │ │ │ └── test-default-config.yml │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ │ ├── base-fields.yml.link │ │ │ │ ├── external-fields.yml │ │ │ │ └── some_fields.yml │ │ │ ├── lifecycle.yml │ │ │ └── manifest.yml │ │ ├── hidden_data_stream │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ │ ├── ilm_policy │ │ │ ├── elasticsearch │ │ │ │ └── ilm │ │ │ │ │ └── diagnostics.json │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ │ ├── k8s_data_stream │ │ │ ├── _dev │ │ │ │ └── deploy │ │ │ │ │ └── k8s │ │ │ │ │ └── shell-demo.yaml │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ │ ├── k8s_data_stream_no_definitions │ │ │ ├── _dev │ │ │ │ └── deploy │ │ │ │ │ └── k8s │ │ │ │ │ └── .empty │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ │ ├── pe │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ │ ├── rename_message │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ │ ├── root │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ │ ├── routing_rules │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ ├── manifest.yml │ │ │ └── routing_rules.yml │ │ ├── skipped_tests │ │ │ ├── _dev │ │ │ │ └── test │ │ │ │ │ ├── static │ │ │ │ │ └── test-default-config.yml │ │ │ │ │ └── system │ │ │ │ │ └── test-default-config.yml │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ │ └── subobjects │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── elasticsearch │ │ ├── ingest_pipeline │ │ │ └── default.yml │ │ ├── ml_model │ │ │ └── good_v3_ml_model_abc_1.json │ │ └── transform │ │ │ ├── good_example_abc_1 │ │ │ └── transform.yml │ │ │ ├── good_example_bdc_2 │ │ │ ├── manifest.yml │ │ │ └── transform.yml │ │ │ ├── metadata_current │ │ │ ├── fields │ │ │ │ └── fields.yml │ │ │ ├── manifest.yml │ │ │ └── transform.yml │ │ │ └── metadata_united │ │ │ ├── fields │ │ │ └── fields.yml │ │ │ ├── manifest.yml │ │ │ └── transform.yml │ ├── img │ │ ├── kibana-system.png │ │ ├── metricbeat_system_dashboard.png │ │ └── system.svg │ ├── kibana │ │ ├── csp_rule_template │ │ │ └── good_v3-csp-rule-template-abc-1.json │ │ ├── dashboard │ │ │ └── good_v3-dashboard-abc-1.json │ │ ├── lens │ │ │ └── good_v3-lens-abc-1.json │ │ ├── map │ │ │ └── good_v3-map-abc-1.json │ │ ├── ml_module │ │ │ └── good_v3-ml-module-abc-1.json │ │ ├── osquery_pack_asset │ │ │ └── good_v3-osquery-pack-asset-1.json │ │ ├── osquery_saved_query │ │ │ └── good_v3-osquery-saved-query-1.json │ │ ├── search │ │ │ └── good_v3-search-abc-1.json │ │ ├── security_rule │ │ │ └── 000047bb-b27a-47ec-8b62-ef1a5d2c9e19.json │ │ ├── slo │ │ │ └── good_v3-slo-abc-1.json │ │ ├── tag │ │ │ └── good_v3-tag-abc-1.json │ │ ├── tags.yml │ │ └── visualization │ │ │ └── good_v3-visualization-abc-1.json │ ├── manifest.yml │ └── validation.yml │ ├── httpjson_input │ ├── agent │ │ └── input │ │ │ └── input.yml.hbs │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── fields │ │ ├── base-fields.yml │ │ └── input.yml │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── icons_dark_mode │ ├── NOTICE.txt │ ├── _dev │ │ └── build │ │ │ ├── build.yml │ │ │ └── docs │ │ │ └── README.md │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── system-dark.svg │ │ └── system.svg │ └── manifest.yml │ ├── ignored_malformed │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── foo │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ └── fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── inconsistent_version │ ├── changelog.yml │ ├── docs │ │ └── README.md │ └── manifest.yml │ ├── input_groups │ ├── _dev │ │ └── build │ │ │ └── docs │ │ │ ├── README.md │ │ │ ├── dynamodb.md │ │ │ └── ec2.md │ ├── changelog.yml │ ├── data_stream │ │ ├── dynamodb │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── fields.yml │ │ │ └── manifest.yml │ │ ├── ec2_logs │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── s3.yml.hbs │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── fields.yml │ │ │ └── manifest.yml │ │ ├── ec2_metrics │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── fields.yml │ │ │ └── manifest.yml │ │ └── spamfirewall │ │ │ ├── agent │ │ │ └── stream │ │ │ │ ├── stream.yml.hbs │ │ │ │ ├── tcp.yml.hbs │ │ │ │ └── udp.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ └── fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ ├── README.md │ │ ├── dynamodb.md │ │ └── ec2.md │ ├── img │ │ ├── aws-dynamodb-overview.png │ │ ├── aws-dynamodb.svg │ │ ├── aws-ec2-overview.png │ │ ├── aws-ec2.svg │ │ ├── aws-general-dashboard.png │ │ ├── aws-logo.svg │ │ └── barracuda-logo.svg │ └── manifest.yml │ ├── input_groups_bad_data_stream │ ├── _dev │ │ └── build │ │ │ ├── build.yml │ │ │ └── docs │ │ │ ├── README.md │ │ │ ├── dynamodb.md │ │ │ └── ec2.md │ ├── changelog.yml │ ├── data_stream │ │ ├── dynamodb │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── stream.yml.hbs │ │ │ ├── fields │ │ │ │ ├── base_fields.yml │ │ │ │ └── fields.yml │ │ │ └── manifest.yml │ │ ├── ec2_logs │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── s3.yml.hbs │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ │ ├── base_fields.yml │ │ │ │ └── fields.yml │ │ │ └── manifest.yml │ │ └── ec2_metrics │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── fields │ │ │ ├── base_fields.yml │ │ │ └── fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ ├── README.md │ │ ├── dynamodb.md │ │ └── ec2.md │ ├── img │ │ ├── aws-dynamodb-overview.png │ │ ├── aws-dynamodb.svg │ │ ├── aws-ec2-overview.png │ │ ├── aws-ec2.svg │ │ ├── aws-general-dashboard.png │ │ ├── aws-logo.svg │ │ └── barracuda-logo.svg │ └── manifest.yml │ ├── input_template │ ├── agent │ │ └── input │ │ │ ├── example.yml.hbs │ │ │ └── template.yml.hbs │ ├── changelog.yml │ ├── data_stream │ │ └── nothing │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ └── nothing.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ └── manifest.yml │ ├── integration_benchmarks │ ├── _dev │ │ └── benchmark │ │ │ ├── rally │ │ │ ├── 20000-benchmark │ │ │ │ ├── config.yml │ │ │ │ ├── fields.yml │ │ │ │ └── template.ndjson │ │ │ └── rally-benchmark.yml │ │ │ └── system │ │ │ ├── deploy │ │ │ ├── docker │ │ │ │ └── docker-compose.yml │ │ │ ├── k8s │ │ │ │ └── shell-demo.yaml │ │ │ ├── tf │ │ │ │ ├── .terraform.lock.hcl │ │ │ │ ├── data.json │ │ │ │ ├── main.tf │ │ │ │ └── template.tftpl │ │ │ └── variants.yml │ │ │ ├── tcp-benchmark.yml │ │ │ └── tcp-benchmark │ │ │ ├── config.yml │ │ │ ├── fields.yml │ │ │ └── template.log │ ├── changelog.yml │ ├── data_stream │ │ └── foo │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ └── fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ └── manifest.yml │ ├── invalid_field_for_version │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── foo │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── kibana_configuration_links │ ├── LICENSE.txt │ ├── NOTICE.txt │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── kibana-system.png │ │ ├── metricbeat_system_dashboard.png │ │ └── system.svg │ └── manifest.yml │ ├── kibana_legacy_visualizations │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── kibana │ │ ├── dashboard │ │ │ └── kibana_legacy_visualizations-c36e9b90-596c-11ee-adef-4fe896364076.json │ │ └── search │ │ │ └── kibana_legacy_visualizations-8f2e0810-596d-11ee-adef-4fe896364076.json │ ├── manifest.yml │ └── validation.yml │ ├── logs_synthetic_mode │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── synthetic │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ └── some-fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── missing_data_stream │ ├── changelog.yml │ ├── docs │ │ └── README.md │ └── manifest.yml │ ├── missing_image_files │ ├── _dev │ │ └── build │ │ │ └── build.yml │ ├── changelog.yml │ ├── data_stream │ │ └── pe │ │ │ ├── fields │ │ │ ├── base_fields.yml │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── metricbeat_system_dashboard.png │ │ └── system.svg │ └── manifest.yml │ ├── missing_pipeline_dashes │ ├── _dev │ │ └── build │ │ │ └── build.yml │ ├── changelog.yml │ ├── data_stream │ │ └── foo │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ ├── base_fields.yml │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ └── manifest.yml │ ├── missing_required_fields │ ├── NOTICE.txt │ ├── _dev │ │ ├── build │ │ │ ├── build.yml │ │ │ └── docs │ │ │ │ └── README.md │ │ └── deploy │ │ │ └── tf │ │ │ ├── .terraform.lock.hcl │ │ │ ├── data.json │ │ │ ├── main.tf │ │ │ └── template.tftpl │ ├── changelog.yml │ ├── data_stream │ │ └── foo │ │ │ ├── _dev │ │ │ ├── deploy │ │ │ │ ├── docker │ │ │ │ │ ├── docker-compose.d │ │ │ │ │ │ └── hi.sh │ │ │ │ │ └── docker-compose.yml │ │ │ │ └── tf │ │ │ │ │ ├── .terraform.lock.hcl │ │ │ │ │ ├── data.json │ │ │ │ │ ├── main.tf │ │ │ │ │ ├── some-module.tf │ │ │ │ │ └── template.tftpl │ │ │ └── test │ │ │ │ ├── pipeline │ │ │ │ ├── test-access-event.json │ │ │ │ ├── test-access-event.json-expected.json │ │ │ │ ├── test-access-raw.log │ │ │ │ ├── test-access-raw.log-config.yml │ │ │ │ ├── test-access-raw.log-expected.json │ │ │ │ └── test-common-config.yml │ │ │ │ └── system │ │ │ │ └── test-default-config.yml │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ ├── external-fields.yml │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── elasticsearch │ │ └── ingest_pipeline │ │ │ └── default.yml │ ├── img │ │ ├── kibana-system.png │ │ ├── metricbeat_system_dashboard.png │ │ └── system.svg │ └── manifest.yml │ ├── missing_required_fields_input │ ├── LICENSE.txt │ ├── _dev │ │ └── build │ │ │ └── build.yml │ ├── agent │ │ └── input │ │ │ └── input.yml.hbs │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── fields │ │ ├── base-fields.yml │ │ ├── external-fields.yml │ │ └── some_fields.yml │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── missing_version │ ├── changelog.yml │ ├── docs │ │ └── README.md │ └── manifest.yml │ ├── next_version_unreleased │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── no_manifest │ └── .keep │ ├── no_spec_version │ └── manifest.yml │ ├── profiling_symbolizer │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── example │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── same_version_twice │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ └── manifest.yml │ ├── skip_pipeline_rename_validation │ ├── LICENSE.txt │ ├── changelog.yml │ ├── data_stream │ │ └── invalid_message_rename │ │ │ ├── agent │ │ │ └── stream │ │ │ │ └── stream.yml.hbs │ │ │ ├── elasticsearch │ │ │ └── ingest_pipeline │ │ │ │ └── default.yml │ │ │ ├── fields │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ ├── manifest.yml │ └── validation.yml │ ├── sql_input │ ├── LICENSE.txt │ ├── _dev │ │ ├── build │ │ │ ├── build.yml │ │ │ └── docs │ │ │ │ └── README.md │ │ ├── deploy │ │ │ └── tf │ │ │ │ ├── .terraform.lock.hcl │ │ │ │ ├── data.json │ │ │ │ ├── main.tf │ │ │ │ └── template.tftpl │ │ └── test │ │ │ └── system │ │ │ └── test-default-config.yml │ ├── agent │ │ └── input │ │ │ └── input.yml.hbs │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── fields │ │ ├── base-fields.yml │ │ └── input.yml │ ├── img │ │ ├── sample-logo.svg │ │ └── sample-screenshot.png │ ├── lifecycle.yml │ ├── manifest.yml │ └── sample_event.json │ ├── visualizations_by_reference │ ├── changelog.yml │ ├── docs │ │ └── README.md │ ├── kibana │ │ ├── dashboard │ │ │ └── visualizations_by_reference-82273ffe-6acc-4f2f-bbee-c1004abba63d.json │ │ └── visualization │ │ │ ├── visualizations_by_reference-5e1a01ff-6f9a-41c1-b7ad-326472db42b6.json │ │ │ └── visualizations_by_reference-8287a5d5-1576-4f3a-83c4-444e9058439b.json │ └── manifest.yml │ ├── with_links │ ├── LICENSE.txt │ ├── NOTICE.txt │ ├── _dev │ │ ├── build │ │ │ ├── build.yml │ │ │ └── docs │ │ │ │ └── README.md │ │ ├── deploy │ │ │ └── tf │ │ │ │ ├── .terraform.lock.hcl │ │ │ │ ├── data.json │ │ │ │ ├── main.tf │ │ │ │ └── template.tftpl │ │ └── shared │ │ │ ├── default.json │ │ │ ├── default.yml │ │ │ ├── s3.yml.hbs │ │ │ └── some_fields.yml │ ├── changelog.yml │ ├── data_stream │ │ ├── foo │ │ │ ├── _dev │ │ │ │ ├── benchmark │ │ │ │ │ └── pipeline │ │ │ │ │ │ ├── access-event.json │ │ │ │ │ │ ├── access-raw.log │ │ │ │ │ │ └── config.yml │ │ │ │ ├── deploy │ │ │ │ │ ├── docker │ │ │ │ │ │ ├── docker-compose.d │ │ │ │ │ │ │ └── hi.sh │ │ │ │ │ │ └── docker-compose.yml │ │ │ │ │ └── tf │ │ │ │ │ │ ├── .terraform.lock.hcl │ │ │ │ │ │ ├── data.json │ │ │ │ │ │ ├── main.tf │ │ │ │ │ │ ├── some-module.tf │ │ │ │ │ │ └── template.tftpl │ │ │ │ └── test │ │ │ │ │ ├── pipeline │ │ │ │ │ ├── test-access-event.json │ │ │ │ │ ├── test-access-event.json-expected.json │ │ │ │ │ ├── test-access-raw.log │ │ │ │ │ ├── test-access-raw.log-config.yml │ │ │ │ │ ├── test-access-raw.log-expected.json │ │ │ │ │ └── test-common-config.yml │ │ │ │ │ └── system │ │ │ │ │ └── test-default-config.yml │ │ │ ├── agent │ │ │ │ └── stream │ │ │ │ │ └── s3.yml.hbs.link │ │ │ ├── elasticsearch │ │ │ │ └── ingest_pipeline │ │ │ │ │ └── default.json.link │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ ├── external-fields.yml │ │ │ │ └── some-fields.yml.link │ │ │ └── manifest.yml │ │ ├── hidden_data_stream │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ │ ├── ilm_policy │ │ │ ├── elasticsearch │ │ │ │ └── ilm │ │ │ │ │ └── diagnostics.json │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ │ ├── k8s_data_stream │ │ │ ├── _dev │ │ │ │ └── deploy │ │ │ │ │ └── k8s │ │ │ │ │ └── shell-demo.yaml │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ │ ├── k8s_data_stream_no_definitions │ │ │ ├── _dev │ │ │ │ └── deploy │ │ │ │ │ └── k8s │ │ │ │ │ └── .empty │ │ │ ├── fields │ │ │ │ └── base-fields.yml │ │ │ └── manifest.yml │ │ ├── pe │ │ │ ├── fields │ │ │ │ ├── base-fields.yml │ │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ │ └── skipped_tests │ │ │ ├── _dev │ │ │ └── test │ │ │ │ ├── static │ │ │ │ └── test-default-config.yml │ │ │ │ └── system │ │ │ │ └── test-default-config.yml │ │ │ ├── fields │ │ │ ├── base-fields.yml │ │ │ └── some_fields.yml │ │ │ └── manifest.yml │ ├── docs │ │ └── README.md │ ├── elasticsearch │ │ ├── ingest_pipeline │ │ │ └── default.yml.link │ │ ├── ml_model │ │ │ └── with_links_ml_model_abc_1.json │ │ └── transform │ │ │ ├── good_example_abc_1 │ │ │ └── transform.yml │ │ │ ├── good_example_bdc_2 │ │ │ ├── manifest.yml │ │ │ └── transform.yml │ │ │ ├── metadata_current │ │ │ ├── fields │ │ │ │ └── fields.yml │ │ │ ├── manifest.yml │ │ │ └── transform.yml │ │ │ └── metadata_united │ │ │ ├── fields │ │ │ └── fields.yml │ │ │ ├── manifest.yml │ │ │ └── transform.yml │ ├── img │ │ ├── kibana-system.png │ │ ├── metricbeat_system_dashboard.png │ │ └── system.svg │ ├── kibana │ │ ├── csp_rule_template │ │ │ └── with_links-csp-rule-template-abc-1.json │ │ ├── dashboard │ │ │ └── with_links-dashboard-abc-1.json │ │ ├── lens │ │ │ └── with_links-lens-abc-1.json │ │ ├── map │ │ │ └── with_links-map-abc-1.json │ │ ├── ml_module │ │ │ └── with_links-ml-module-abc-1.json │ │ ├── osquery_pack_asset │ │ │ └── with_links-osquery-pack-asset-1.json │ │ ├── osquery_saved_query │ │ │ └── with_links-osquery-saved-query-1.json │ │ ├── search │ │ │ └── with_links-search-abc-1.json │ │ ├── security_rule │ │ │ ├── 000047bb-b27a-47ec-8b62-ef1a5d2c9e19.json │ │ │ └── 000047bb-b27a-47ec-8b62-ef1a5d2c9e19_5.json │ │ ├── tag │ │ │ └── with_links-tag-abc-1.json │ │ └── visualization │ │ │ └── with_links-visualization-abc-1.json │ └── manifest.yml │ └── wrong_kibana_filename │ ├── _dev │ └── build │ │ └── build.yml │ ├── changelog.yml │ ├── data_stream │ └── foo │ │ ├── fields │ │ ├── base_fields.yml │ │ └── some_fields.yml │ │ └── manifest.yml │ ├── docs │ └── README.md │ ├── kibana │ ├── dashboard │ │ ├── b7e55b73-97cc-44fd-8555-d01b7e13e70d.json │ │ ├── bad-Foobaz-ECS.json │ │ ├── bad-ecs.json │ │ └── bad-foobar-ecs.json │ ├── map │ │ ├── 06149856-cbc1-4988-a93a-815915c4408e.json │ │ ├── another-package-map.json │ │ └── bad-map.json │ ├── search │ │ ├── 691240b5-7ec9-4fd7-8750-4ef97944f960.json │ │ ├── another-package-search.json │ │ └── bad-search.json │ └── visualization │ │ ├── another-package-visualization.json │ │ ├── bad-visualization.json │ │ └── defa1bcc-1ab6-4069-adec-8c997b069a5e.json │ └── manifest.yml └── versions └── 1 └── README.md /.buildkite/hooks/pre-exit: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | source .buildkite/scripts/tooling.sh 4 | 5 | set -euo pipefail 6 | 7 | unset_secrets 8 | -------------------------------------------------------------------------------- /.buildkite/scripts/run-linux-tests.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | set -euo pipefail 4 | 5 | source .buildkite/scripts/install_deps.sh 6 | 7 | install_go_dependencies 8 | 9 | make test-ci 10 | -------------------------------------------------------------------------------- /.github/CODEOWNERS: -------------------------------------------------------------------------------- 1 | * @elastic/ecosystem 2 | -------------------------------------------------------------------------------- /.github/dependabot.yml: -------------------------------------------------------------------------------- 1 | --- 2 | version: 2 3 | updates: 4 | - package-ecosystem: "gomod" 5 | directories: 6 | - "/" 7 | - "/compliance" 8 | schedule: 9 | interval: "daily" 10 | labels: 11 | - automation 12 | reviewers: 13 | - "elastic/ecosystem" 14 | open-pull-requests-limit: 10 15 | -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | .idea/ 2 | temp/ 3 | fuzz 4 | /build/ 5 | .vscode/ 6 | -------------------------------------------------------------------------------- /.go-version: -------------------------------------------------------------------------------- 1 | 1.23.4 2 | -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/fakespec/fake/beta/spec.yml: -------------------------------------------------------------------------------- 1 | spec: 2 | additionalContents: true 3 | release: beta 4 | -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/fakespec/fake/ga/spec.yml: -------------------------------------------------------------------------------- 1 | spec: 2 | additionalContents: true -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/fakespec/fake/patches/data_stream/manifest.spec.yml: -------------------------------------------------------------------------------- 1 | spec: 2 | additionalContents: true 3 | -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/fakespec/fake/patches/data_stream/other.spec.yml: -------------------------------------------------------------------------------- 1 | spec: 2 | additionalContents: true 3 | -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/fakespec/fake/patches/manifest.spec.yml: -------------------------------------------------------------------------------- 1 | spec: 2 | additionalContents: true 3 | -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/features_beta/beta/.empty: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/code/go/internal/validator/testdata/packages/features_beta/beta/.empty -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/features_beta/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "2.3.4" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/package-spec/pull/341 -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/features_beta/ga/.empty: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/code/go/internal/validator/testdata/packages/features_beta/ga/.empty -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/features_beta/manifest.yml: -------------------------------------------------------------------------------- 1 | format_version: 1.0.0 2 | name: features_beta 3 | version: 2.3.4 4 | type: fake -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/features_ga/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.2.3" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/package-spec/pull/341 -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/features_ga/ga/.empty: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/code/go/internal/validator/testdata/packages/features_ga/ga/.empty -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/features_ga/manifest.yml: -------------------------------------------------------------------------------- 1 | format_version: 1.0.0 2 | name: features_ga 3 | version: 1.2.3 4 | type: fake -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/folder_spec_patches/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.2.3" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/package-spec/pull/341 -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/folder_spec_patches/ga/.empty: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/code/go/internal/validator/testdata/packages/folder_spec_patches/ga/.empty -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/folder_spec_patches/manifest.yml: -------------------------------------------------------------------------------- 1 | format_version: 1.0.0 2 | name: folder_spec_patches 3 | version: 1.2.3 4 | type: fake -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/folder_spec_patches/patches/manifest.yml: -------------------------------------------------------------------------------- 1 | field: foo 2 | -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/folder_spec_patches/patches/other.yml: -------------------------------------------------------------------------------- 1 | field: foo 2 | -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/folder_spec_patches_chain/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.2.3" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/package-spec/pull/341 -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/folder_spec_patches_chain/ga/.empty: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/code/go/internal/validator/testdata/packages/folder_spec_patches_chain/ga/.empty -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/folder_spec_patches_chain/manifest.yml: -------------------------------------------------------------------------------- 1 | format_version: 1.0.0 2 | name: folder_spec_patches 3 | version: 1.2.3 4 | type: fake -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/folder_spec_patches_chain/patches/data_stream/manifest.yml: -------------------------------------------------------------------------------- 1 | field: foo 2 | -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/folder_spec_patches_chain/patches/manifest.yml: -------------------------------------------------------------------------------- 1 | field: foo 2 | -------------------------------------------------------------------------------- /code/go/internal/validator/testdata/packages/folder_spec_patches_chain/patches/other.yml: -------------------------------------------------------------------------------- 1 | field: foo 2 | -------------------------------------------------------------------------------- /code/go/pkg/specerrors/testdata/validation.yml: -------------------------------------------------------------------------------- 1 | errors: 2 | exclude_checks: 3 | - CODE01 4 | - CODE02 -------------------------------------------------------------------------------- /code/go/pkg/validator/testdata/templates/integration_v1/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /code/go/pkg/validator/testdata/templates/integration_v1/data_stream/test/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | metricsets: ["sample_metricset"] 2 | hosts: 3 | {{#each hosts}} 4 | - {{this}} 5 | {{/each}} 6 | period: {{period}} 7 | -------------------------------------------------------------------------------- /code/go/pkg/validator/testdata/templates/integration_v1/docs/README.md: -------------------------------------------------------------------------------- 1 | # Package with time series 2 | 3 | This is a new integration created using the [elastic-package](https://github.com/elastic/elastic-package) tool. 4 | 5 | Consider using the README template file `_dev/build/docs/README.md`to generate a list of exported fields or include a sample event. -------------------------------------------------------------------------------- /code/go/pkg/validator/testdata/templates/integration_v1/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/code/go/pkg/validator/testdata/templates/integration_v1/img/sample-screenshot.png -------------------------------------------------------------------------------- /code/go/pkg/validator/testdata/templates/integration_v3/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /code/go/pkg/validator/testdata/templates/integration_v3/data_stream/test/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /code/go/pkg/validator/testdata/templates/integration_v3/data_stream/test/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' 11 | -------------------------------------------------------------------------------- /code/go/pkg/validator/testdata/templates/integration_v3/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/code/go/pkg/validator/testdata/templates/integration_v3/img/sample-screenshot.png -------------------------------------------------------------------------------- /compliance/.gitignore: -------------------------------------------------------------------------------- 1 | report.xml 2 | *.test 3 | -------------------------------------------------------------------------------- /compliance/features/ai.feature: -------------------------------------------------------------------------------- 1 | Feature: Support for AI-related features 2 | 3 | @3.4.0 4 | Scenario: Content package includes AI prompt 5 | Given the "good_content" package is installed 6 | Then there is a security AI prompt "good_content-security-ai-prompt-1" 7 | -------------------------------------------------------------------------------- /compliance/testdata/packages/basic_content/docs/README.md: -------------------------------------------------------------------------------- 1 | # Reference package of content type 2 | -------------------------------------------------------------------------------- /compliance/testdata/packages/basic_content/img/kibana-system.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/compliance/testdata/packages/basic_content/img/kibana-system.png -------------------------------------------------------------------------------- /compliance/testdata/packages/basic_input/agent/input/input.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: [] 2 | data_stream: 3 | dataset: "{{data_stream.dataset}}" 4 | -------------------------------------------------------------------------------- /compliance/testdata/packages/basic_input/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /compliance/testdata/packages/basic_input/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/compliance/testdata/packages/basic_input/img/sample-screenshot.png -------------------------------------------------------------------------------- /compliance/testdata/packages/basic_integration/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /compliance/testdata/packages/basic_integration/data_stream/foo/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | metricsets: ["sample_metricset"] 2 | hosts: 3 | {{#each hosts}} 4 | - {{this}} 5 | {{/each}} 6 | period: {{period}} 7 | -------------------------------------------------------------------------------- /compliance/testdata/packages/basic_integration/data_stream/foo/manifest.yml: -------------------------------------------------------------------------------- 1 | title: "Test data stream" 2 | type: metrics 3 | streams: 4 | - input: sample/metrics 5 | title: Sample metrics 6 | description: Collect sample metrics 7 | vars: 8 | - name: period 9 | type: text 10 | title: Period 11 | default: 10s 12 | -------------------------------------------------------------------------------- /compliance/testdata/packages/basic_integration/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/compliance/testdata/packages/basic_integration/img/sample-screenshot.png -------------------------------------------------------------------------------- /compliance/testdata/packages/counted_keyword/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /compliance/testdata/packages/counted_keyword/data_stream/foo/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | metricsets: ["sample_metricset"] 2 | hosts: 3 | {{#each hosts}} 4 | - {{this}} 5 | {{/each}} 6 | period: {{period}} 7 | -------------------------------------------------------------------------------- /compliance/testdata/packages/counted_keyword/data_stream/foo/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: foo.count 2 | type: counted_keyword 3 | -------------------------------------------------------------------------------- /compliance/testdata/packages/counted_keyword/data_stream/foo/manifest.yml: -------------------------------------------------------------------------------- 1 | title: "Test data stream" 2 | type: metrics 3 | streams: 4 | - input: sample/metrics 5 | title: Sample metrics 6 | description: Collect sample metrics 7 | vars: 8 | - name: period 9 | type: text 10 | title: Period 11 | default: 10s 12 | -------------------------------------------------------------------------------- /compliance/testdata/packages/counted_keyword/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/compliance/testdata/packages/counted_keyword/img/sample-screenshot.png -------------------------------------------------------------------------------- /compliance/testdata/packages/runtime_fields/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /compliance/testdata/packages/runtime_fields/data_stream/foo/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | metricsets: ["sample_metricset"] 2 | hosts: 3 | {{#each hosts}} 4 | - {{this}} 5 | {{/each}} 6 | period: {{period}} 7 | -------------------------------------------------------------------------------- /compliance/testdata/packages/runtime_fields/data_stream/foo/manifest.yml: -------------------------------------------------------------------------------- 1 | title: "Data stream with runtime fields" 2 | type: metrics 3 | streams: 4 | - input: sample/metrics 5 | title: Sample metrics 6 | description: Collect sample metrics 7 | vars: 8 | - name: period 9 | type: text 10 | title: Period 11 | default: 10s 12 | -------------------------------------------------------------------------------- /compliance/testdata/packages/runtime_fields/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/compliance/testdata/packages/runtime_fields/img/sample-screenshot.png -------------------------------------------------------------------------------- /compliance/testdata/packages/subobjects_false/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /compliance/testdata/packages/subobjects_false/data_stream/foo/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | metricsets: ["sample_metricset"] 2 | hosts: 3 | {{#each hosts}} 4 | - {{this}} 5 | {{/each}} 6 | period: {{period}} 7 | -------------------------------------------------------------------------------- /compliance/testdata/packages/subobjects_false/data_stream/foo/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: foo.object 2 | type: object 3 | object_type: keyword 4 | subobjects: false 5 | -------------------------------------------------------------------------------- /compliance/testdata/packages/subobjects_false/data_stream/foo/manifest.yml: -------------------------------------------------------------------------------- 1 | title: "Test data stream" 2 | type: metrics 3 | streams: 4 | - input: sample/metrics 5 | title: Sample metrics 6 | description: Collect sample metrics 7 | vars: 8 | - name: period 9 | type: text 10 | title: Period 11 | default: 10s 12 | -------------------------------------------------------------------------------- /compliance/testdata/packages/subobjects_false/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/compliance/testdata/packages/subobjects_false/img/sample-screenshot.png -------------------------------------------------------------------------------- /compliance/testdata/packages/transform/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /compliance/testdata/packages/transform/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/compliance/testdata/packages/transform/img/sample-screenshot.png -------------------------------------------------------------------------------- /compliance/testdata/packages/transform_aliases/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /compliance/testdata/packages/transform_aliases/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/compliance/testdata/packages/transform_aliases/img/sample-screenshot.png -------------------------------------------------------------------------------- /spec/integration/_dev/deploy/agent/spec.yml: -------------------------------------------------------------------------------- 1 | spec: 2 | additionalContents: true 3 | contents: 4 | - description: Custom agent definition. 5 | type: file 6 | name: "custom-agent.yml" 7 | contentMediaType: "application/x-yaml" 8 | required: true 9 | $ref: "./custom-agent.spec.yml" 10 | -------------------------------------------------------------------------------- /spec/integration/_dev/deploy/docker/spec.yml: -------------------------------------------------------------------------------- 1 | spec: 2 | additionalContents: true 3 | contents: 4 | - description: Docker Compose configuration file for deploying package's integration service(s) 5 | type: file 6 | name: "docker-compose.yml" 7 | contentMediaType: "application/x-yaml" 8 | required: true 9 | -------------------------------------------------------------------------------- /spec/integration/_dev/shared/spec.yml: -------------------------------------------------------------------------------- 1 | spec: 2 | additionalContents: true -------------------------------------------------------------------------------- /spec/integration/_dev/test/spec.yml: -------------------------------------------------------------------------------- 1 | spec: 2 | additionalContents: false 3 | contents: 4 | - description: Common Configuration of tests. 5 | type: file 6 | name: 'config.yml' 7 | contentMediaType: "application/x-yaml" 8 | required: false 9 | $ref: "./config.spec.yml" 10 | 11 | 12 | -------------------------------------------------------------------------------- /spec/integration/data_stream/_dev/benchmark/pipeline/config.spec.yml: -------------------------------------------------------------------------------- 1 | spec: 2 | type: object 3 | additionalProperties: false 4 | required: [ "num_docs" ] 5 | properties: 6 | num_docs: 7 | description: Number of documents contained in each benchmark request. Sampled from the included events. 8 | type: integer 9 | -------------------------------------------------------------------------------- /spec/integration/data_stream/_dev/benchmark/spec.yml: -------------------------------------------------------------------------------- 1 | spec: 2 | additionalContents: false 3 | contents: 4 | - description: Folder containing pipeline benchmarks 5 | type: folder 6 | name: pipeline 7 | required: false 8 | $ref: "./pipeline/spec.yml" -------------------------------------------------------------------------------- /spec/integration/data_stream/_dev/test/static/spec.yml: -------------------------------------------------------------------------------- 1 | spec: 2 | additionalContents: false 3 | contents: 4 | - description: Configuration of test case in yaml format. 5 | type: file 6 | pattern: '^test-[a-z0-9_.-]+-config\.yml$' 7 | contentMediaType: "application/x-yaml" 8 | required: false 9 | $ref: "./config.spec.yml" 10 | 11 | -------------------------------------------------------------------------------- /spec/integration/data_stream/fields/spec.yml: -------------------------------------------------------------------------------- 1 | spec: 2 | additionalContents: false 3 | contents: 4 | - description: Fields definition 5 | type: file 6 | pattern: '^[a-z0-9][a-z0-9_-]+[a-z0-9]\.yml$' 7 | required: true 8 | contentMediaType: "application/x-yaml" 9 | allowLink: true 10 | $ref: "./fields.spec.yml" 11 | -------------------------------------------------------------------------------- /spec/integration/img/spec.yml: -------------------------------------------------------------------------------- 1 | spec: 2 | additionalContents: true # TODO: Add definition for this dir? 3 | -------------------------------------------------------------------------------- /test/packages/bad_additional_content/bad-bad/README.md: -------------------------------------------------------------------------------- 1 | Additional content here. 2 | -------------------------------------------------------------------------------- /test/packages/bad_additional_content/docs/README.md: -------------------------------------------------------------------------------- 1 | # Next Version Unreleased 2 | 3 | This is a new integration created using the [elastic-package](https://github.com/elastic/elastic-package) tool. 4 | 5 | Consider using the README template file `_dev/build/docs/README.md`to generate a list of exported fields or include a sample event. -------------------------------------------------------------------------------- /test/packages/bad_additional_content/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_additional_content/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_configuration_links/NOTICE.txt: -------------------------------------------------------------------------------- 1 | Elastic package-spec 2 | Copyright 2021 Elasticsearch B.V. -------------------------------------------------------------------------------- /test/packages/bad_configuration_links/docs/README.md: -------------------------------------------------------------------------------- 1 | This is a template for the package README. -------------------------------------------------------------------------------- /test/packages/bad_configuration_links/img/kibana-system.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_configuration_links/img/kibana-system.png -------------------------------------------------------------------------------- /test/packages/bad_configuration_links/img/metricbeat_system_dashboard.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_configuration_links/img/metricbeat_system_dashboard.png -------------------------------------------------------------------------------- /test/packages/bad_custom_ilm_policy/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/413 7 | -------------------------------------------------------------------------------- /test/packages/bad_custom_ilm_policy/data_stream/test/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_custom_ilm_policy/data_stream/test/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/bad_custom_ilm_policy/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_custom_ilm_policy/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_dangling_object_ids/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_dangling_object_ids/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_dangling_object_ids/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_dangling_object_ids/kibana/search/bad_dangling_object_ids-5e1a01ff-6f9a-41c1-b7ad-326472db42b6.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "bad_dangling_object_ids-5e1a01ff-6f9a-41c1-b7ad-326472db42b6", 3 | "references": [], 4 | "type": "search" 5 | } -------------------------------------------------------------------------------- /test/packages/bad_dangling_object_ids/kibana/search/bad_dangling_object_ids-8287a5d5-1576-4f3a-83c4-444e9058439b.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "bad_dangling_object_ids-8287a5d5-1576-4f3a-83c4-444e9058439b", 3 | "references": [], 4 | "type": "search" 5 | } -------------------------------------------------------------------------------- /test/packages/bad_dangling_object_ids/validation.yml: -------------------------------------------------------------------------------- 1 | errors: 2 | exclude_checks: 3 | - SVR00004 # References in dashboards. 4 | -------------------------------------------------------------------------------- /test/packages/bad_data_stream_name/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_data_stream_name/data_stream/integration/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_data_stream_name/data_stream/integration/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' 11 | -------------------------------------------------------------------------------- /test/packages/bad_data_stream_name/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_data_stream_name/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_deploy_variants/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v8.7.0 4 | -------------------------------------------------------------------------------- /test/packages/bad_deploy_variants/_dev/deploy/docker/docker-compose.yml: -------------------------------------------------------------------------------- 1 | version: '2.3' 2 | services: 3 | hello_world: -------------------------------------------------------------------------------- /test/packages/bad_deploy_variants/_dev/deploy/variants.yml: -------------------------------------------------------------------------------- 1 | # This file should fail validation against the spec for two reasons: 2 | # 1. "variants" needs to be an object, not an array. 3 | # 2. there needs to be a top-level "default" key. 4 | variants: 5 | - FOO: bar -------------------------------------------------------------------------------- /test/packages/bad_deploy_variants/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.1.2 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/131 -------------------------------------------------------------------------------- /test/packages/bad_deploy_variants/data_stream/foo/fields/base_fields.yml: -------------------------------------------------------------------------------- 1 | - name: data_stream.dataset 2 | external: ecs 3 | - name: data_stream.namespace 4 | external: ecs 5 | - name: data_stream.type 6 | external: ecs 7 | - name: "@timestamp" 8 | external: ecs 9 | -------------------------------------------------------------------------------- /test/packages/bad_deploy_variants/data_stream/foo/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: source 2 | title: Source 3 | group: 2 4 | type: group 5 | fields: 6 | - name: geo.city_name 7 | level: core 8 | type: keyword 9 | description: City name. 10 | ignore_above: 1024 -------------------------------------------------------------------------------- /test/packages/bad_deploy_variants/data_stream/foo/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Nginx access logs 2 | -------------------------------------------------------------------------------- /test/packages/bad_deploy_variants/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/bad_deploy_variants/manifest.yml: -------------------------------------------------------------------------------- 1 | format_version: 1.0.0 2 | name: bad_deploy_variants 3 | title: Bad Deploy Variants 4 | description: This package contains a bad _dev/deploy folder. 5 | version: 0.1.2 6 | type: integration 7 | release: beta 8 | owner: 9 | github: elastic/foobar -------------------------------------------------------------------------------- /test/packages/bad_deployment_mode/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_deployment_mode/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_deployment_mode/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_deployment_mode_resources/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_deployment_mode_resources/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_deployment_mode_resources/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_deployment_mode_without_identities/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_deployment_mode_without_identities/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_deployment_mode_without_identities/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_dotted_fields/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_dotted_fields/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_dotted_fields/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_duplicated_fields/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v8.7.0 4 | -------------------------------------------------------------------------------- /test/packages/bad_duplicated_fields/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/309 7 | -------------------------------------------------------------------------------- /test/packages/bad_duplicated_fields/data_stream/good/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_duplicated_fields/data_stream/good/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/bad_duplicated_fields/data_stream/wrong/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_duplicated_fields/data_stream/wrong/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/bad_duplicated_fields/data_stream/wrong/fields/ecs.yml: -------------------------------------------------------------------------------- 1 | - name: event.dataset 2 | external: ecs 3 | -------------------------------------------------------------------------------- /test/packages/bad_duplicated_fields/docs/README.md: -------------------------------------------------------------------------------- 1 | # Package with duplicated fields 2 | 3 | This is a new integration created using the [elastic-package](https://github.com/elastic/elastic-package) tool. 4 | 5 | Consider using the README template file `_dev/build/docs/README.md`to generate a list of exported fields or include a sample event. -------------------------------------------------------------------------------- /test/packages/bad_duplicated_fields/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_duplicated_fields/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_duplicated_fields_input/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v8.7.0 4 | -------------------------------------------------------------------------------- /test/packages/bad_duplicated_fields_input/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_duplicated_fields_input/fields/ecs.yml: -------------------------------------------------------------------------------- 1 | - name: event.dataset 2 | external: ecs 3 | -------------------------------------------------------------------------------- /test/packages/bad_duplicated_fields_input/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_duplicated_fields_input/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_external_without_dev_build/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_external_without_dev_build/data_stream/foo/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_external_without_dev_build/data_stream/foo/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/bad_external_without_dev_build/data_stream/foo/fields/ecs.yml: -------------------------------------------------------------------------------- 1 | - name: container.id 2 | external: ecs 3 | dimension: true 4 | -------------------------------------------------------------------------------- /test/packages/bad_external_without_dev_build/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_external_without_dev_build/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_github_owner/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial release 5 | type: enhancement 6 | link: https://github.com/elastic/package-spec/pull/164 7 | -------------------------------------------------------------------------------- /test/packages/bad_github_owner/docs/README.md: -------------------------------------------------------------------------------- 1 | # Bad Github Owner 2 | 3 | This is a new integration created using the [elastic-package](https://github.com/elastic/elastic-package) tool. 4 | 5 | Consider using the README template file `_dev/docs/README.md`to generate a list of exported fields or include a sample event. -------------------------------------------------------------------------------- /test/packages/bad_github_owner/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_github_owner/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_group_unit/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/package-spec/pull/183 7 | -------------------------------------------------------------------------------- /test/packages/bad_group_unit/data_stream/bar/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_group_unit/data_stream/bar/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/bad_group_unit/data_stream/bar/manifest.yml: -------------------------------------------------------------------------------- 1 | title: "Bar" 2 | type: logs 3 | streams: 4 | - input: logfile 5 | title: Sample logs 6 | description: Collect sample logs 7 | vars: 8 | - name: paths 9 | type: text 10 | title: Paths 11 | multi: true 12 | default: 13 | - /var/log/*.log 14 | -------------------------------------------------------------------------------- /test/packages/bad_group_unit/data_stream/foo/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_group_unit/data_stream/foo/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/bad_group_unit/data_stream/foo/fields/bad-file.yml: -------------------------------------------------------------------------------- 1 | - name: fff 2 | type: group 3 | metric_type: counter 4 | fields: 5 | - name: world 6 | type: integer 7 | metric_type: gauge -------------------------------------------------------------------------------- /test/packages/bad_group_unit/data_stream/foo/manifest.yml: -------------------------------------------------------------------------------- 1 | title: "Foo" 2 | type: logs 3 | streams: 4 | - input: logfile 5 | title: Sample logs 6 | description: Collect sample logs 7 | vars: 8 | - name: paths 9 | type: text 10 | title: Paths 11 | multi: true 12 | default: 13 | - /var/log/*.log 14 | -------------------------------------------------------------------------------- /test/packages/bad_group_unit/docs/README.md: -------------------------------------------------------------------------------- 1 | # bad_group_unit 2 | 3 | This is a new integration created using the [elastic-package](https://github.com/elastic/elastic-package) tool. 4 | 5 | Consider using the README template file `_dev/build/docs/README.md`to generate a list of exported fields or include a sample event. -------------------------------------------------------------------------------- /test/packages/bad_group_unit/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_group_unit/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_ingest_pipeline/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_ingest_pipeline/data_stream/bad_rename_message/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_ingest_pipeline/data_stream/bad_rename_message_2/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_ingest_pipeline/data_stream/test/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_ingest_pipeline/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_ingest_pipeline/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_ingest_pipeline/validation.yml: -------------------------------------------------------------------------------- 1 | errors: 2 | exclude_checks: 3 | - PSR00001 # Allow to use unreleased features in GA package. 4 | -------------------------------------------------------------------------------- /test/packages/bad_input_dataset_vars/_dev/test/policy/test-vars.yml: -------------------------------------------------------------------------------- 1 | vars: 2 | data_stream.dataset: 'hyphen-not-allowed' 3 | data_stream: ~ 4 | -------------------------------------------------------------------------------- /test/packages/bad_input_dataset_vars/agent/input/input.yml.hbs: -------------------------------------------------------------------------------- 1 | data_stream: 2 | dataset: {{data_stream.dataset}} 3 | paths: 4 | {{#each paths as |path i|}} 5 | - {{path}} 6 | {{/each}} 7 | exclude_files: [".gz$"] 8 | processors: 9 | - add_locale: ~ 10 | 11 | -------------------------------------------------------------------------------- /test/packages/bad_input_dataset_vars/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_input_dataset_vars/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_input_dataset_vars/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_integration_dataset_vars/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_integration_dataset_vars/data_stream/datasets/_dev/test/system/test-vars-config.yml: -------------------------------------------------------------------------------- 1 | vars: 2 | data_stream.dataset: '-this.is-wrong' 3 | data_stream: 4 | vars: 5 | data_stream.dataset: '_wrong-dataset' 6 | -------------------------------------------------------------------------------- /test/packages/bad_integration_dataset_vars/data_stream/datasets/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_integration_dataset_vars/data_stream/datasets/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' 11 | -------------------------------------------------------------------------------- /test/packages/bad_integration_dataset_vars/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_integration_dataset_vars/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_kibana_ids/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.1.2 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/160 -------------------------------------------------------------------------------- /test/packages/bad_kibana_ids/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/bad_kibana_ids/kibana/dashboard/bad_kibana_ids-bar-baz.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "something-else", 3 | "type": "dashboard" 4 | } -------------------------------------------------------------------------------- /test/packages/bad_kibana_ids/kibana/security_rule/bad_kibana_ids-bar-baz.json: -------------------------------------------------------------------------------- 1 | { 2 | "attributes": { 3 | "rule_id": "something-else" 4 | }, 5 | "id": "something-else", 6 | "type": "security-rule" 7 | } -------------------------------------------------------------------------------- /test/packages/bad_kibana_ids/manifest.yml: -------------------------------------------------------------------------------- 1 | format_version: 1.0.0 2 | name: bad_kibana_ids 3 | title: Bad Kibana IDs 4 | description: This package contains Kibana object files with non-matching IDs 5 | version: 0.1.2 6 | type: integration 7 | release: beta 8 | owner: 9 | github: elastic/foobar -------------------------------------------------------------------------------- /test/packages/bad_lifecycle/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_lifecycle/data_stream/test/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_lifecycle/data_stream/test/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/bad_lifecycle/data_stream/test/lifecycle.yml: -------------------------------------------------------------------------------- 1 | data_retention: "30d" 2 | max_age: "365d" 3 | -------------------------------------------------------------------------------- /test/packages/bad_lifecycle/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_lifecycle/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_missing_capability_security_rules/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_missing_capability_security_rules/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_missing_capability_security_rules/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_owner_type/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial release 5 | type: enhancement 6 | link: https://github.com/elastic/package-spec/pull/164 7 | -------------------------------------------------------------------------------- /test/packages/bad_owner_type/docs/README.md: -------------------------------------------------------------------------------- 1 | # Bad Github Owner 2 | 3 | This is a new integration created using the [elastic-package](https://github.com/elastic/elastic-package) tool. 4 | 5 | Consider using the README template file `_dev/docs/README.md`to generate a list of exported fields or include a sample event. -------------------------------------------------------------------------------- /test/packages/bad_owner_type/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_owner_type/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_owner_type_missing/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial release 5 | type: enhancement 6 | link: https://github.com/elastic/package-spec/pull/164 7 | -------------------------------------------------------------------------------- /test/packages/bad_owner_type_missing/docs/README.md: -------------------------------------------------------------------------------- 1 | # Bad Github Owner 2 | 3 | This is a new integration created using the [elastic-package](https://github.com/elastic/elastic-package) tool. 4 | 5 | Consider using the README template file `_dev/docs/README.md`to generate a list of exported fields or include a sample event. -------------------------------------------------------------------------------- /test/packages/bad_owner_type_missing/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_owner_type_missing/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_policy_template_behavior/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_policy_template_behavior/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_policy_template_behavior/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_profiling_symbolizer/data_stream/example/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_profiling_symbolizer/data_stream/example/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/bad_profiling_symbolizer/data_stream/example/manifest.yml: -------------------------------------------------------------------------------- 1 | title: "Universal Profiling Symbols" 2 | type: profiling 3 | release: beta 4 | streams: 5 | - input: pf-elastic-symbolizer 6 | title: Universal Profiling Symbols 7 | description: "Collect debug symbols for native binaries" 8 | enabled: true 9 | -------------------------------------------------------------------------------- /test/packages/bad_profiling_symbolizer/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_profiling_symbolizer/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_release_tag/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_release_tag/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_release_tag/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_required_vars/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_required_vars/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_required_vars/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_required_vars_data_streams/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_required_vars_data_streams/data_stream/test/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_required_vars_data_streams/data_stream/test/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' 11 | -------------------------------------------------------------------------------- /test/packages/bad_required_vars_data_streams/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_required_vars_data_streams/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_routing_rules/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_routing_rules/data_stream/rules/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_routing_rules/data_stream/rules/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/bad_routing_rules/data_stream/rules/manifest.yml: -------------------------------------------------------------------------------- 1 | title: "Rules" 2 | type: logs 3 | streams: 4 | - input: logfile 5 | title: Sample logs 6 | description: Collect sample logs 7 | vars: 8 | - name: paths 9 | type: text 10 | title: Paths 11 | multi: true 12 | default: 13 | - /var/log/*.log 14 | -------------------------------------------------------------------------------- /test/packages/bad_routing_rules/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_routing_rules/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_routing_rules_missing_if/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_routing_rules_missing_if/data_stream/rules/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_routing_rules_missing_if/data_stream/rules/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/bad_routing_rules_missing_if/data_stream/rules/routing_rules.yml: -------------------------------------------------------------------------------- 1 | # "Local" routing rules are included under this current dataset, not a special case 2 | - source_dataset: routing_rules 3 | rules: # Route error logs to `routing_rules.error` when they're sourced from an error logfile 4 | - target_dataset: routing_rules.error 5 | 6 | -------------------------------------------------------------------------------- /test/packages/bad_routing_rules_missing_if/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_routing_rules_missing_if/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_routing_rules_missing_target_dataset/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_routing_rules_missing_target_dataset/data_stream/rules/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_routing_rules_missing_target_dataset/data_stream/rules/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/bad_routing_rules_missing_target_dataset/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_routing_rules_missing_target_dataset/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_routing_rules_wrong_spec/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_routing_rules_wrong_spec/data_stream/rules/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_routing_rules_wrong_spec/data_stream/rules/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/bad_routing_rules_wrong_spec/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_routing_rules_wrong_spec/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_rule_ids/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.1.2 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/160 -------------------------------------------------------------------------------- /test/packages/bad_rule_ids/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/bad_rule_ids/kibana/security_rule/saved_object_id.json: -------------------------------------------------------------------------------- 1 | { 2 | "attributes": { 3 | "rule_id": "rule_id" 4 | }, 5 | "id": "saved_object_id" 6 | } 7 | -------------------------------------------------------------------------------- /test/packages/bad_rule_ids/manifest.yml: -------------------------------------------------------------------------------- 1 | format_version: 1.0.0 2 | name: bad_rule_ids 3 | title: Bad Rule IDs 4 | description: This package contains detection rules with non-matching object IDs 5 | version: 0.1.2 6 | type: integration 7 | release: beta 8 | owner: 9 | github: elastic/foobar -------------------------------------------------------------------------------- /test/packages/bad_runtime_kibana_version/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_runtime_kibana_version/data_stream/foo/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | metricsets: ["sample_metricset"] 2 | hosts: 3 | {{#each hosts}} 4 | - {{this}} 5 | {{/each}} 6 | period: {{period}} 7 | -------------------------------------------------------------------------------- /test/packages/bad_runtime_kibana_version/data_stream/foo/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: runtime_field_boolean 2 | type: keyword 3 | runtime: true 4 | - name: runtime_field_script 5 | type: keyword 6 | runtime: | 7 | doc['message'].value().doSomething() 8 | -------------------------------------------------------------------------------- /test/packages/bad_runtime_kibana_version/data_stream/foo/manifest.yml: -------------------------------------------------------------------------------- 1 | title: "Foo" 2 | type: metrics 3 | streams: 4 | - input: sample/metrics 5 | title: Sample metrics 6 | description: Collect sample metrics 7 | vars: 8 | - name: period 9 | type: text 10 | title: Period 11 | default: 10s 12 | -------------------------------------------------------------------------------- /test/packages/bad_runtime_kibana_version/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_runtime_kibana_version/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_saved_object_tags/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_saved_object_tags/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_saved_object_tags/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_saved_object_tags_kibana_version/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_saved_object_tags_kibana_version/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_saved_object_tags_kibana_version/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_secret_vars/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_secret_vars/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_secret_vars/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_secret_vars_v3/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_secret_vars_v3/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_secret_vars_v3/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_select/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_select/data_stream/foo_stream/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | metricsets: ["sample_metricset"] 2 | hosts: 3 | {{#each hosts}} 4 | - {{this}} 5 | {{/each}} 6 | period: {{period}} 7 | -------------------------------------------------------------------------------- /test/packages/bad_select/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_select/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/bad_skip_ignored_fields/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/bad_skip_ignored_fields/data_stream/foo/_dev/test/system/test-default-config.yml: -------------------------------------------------------------------------------- 1 | wait_for_data_timeout: 10m 2 | skip_ignored_fields: true 3 | vars: ~ 4 | -------------------------------------------------------------------------------- /test/packages/bad_skip_ignored_fields/data_stream/foo/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/bad_skip_ignored_fields/data_stream/foo/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' 11 | -------------------------------------------------------------------------------- /test/packages/bad_skip_ignored_fields/data_stream/foo/manifest.yml: -------------------------------------------------------------------------------- 1 | title: "Foo" 2 | type: logs 3 | streams: 4 | - input: logfile 5 | title: Sample logs 6 | description: Collect sample logs 7 | vars: 8 | - name: paths 9 | type: text 10 | title: Paths 11 | multi: true 12 | default: 13 | - /var/log/*.log 14 | -------------------------------------------------------------------------------- /test/packages/bad_skip_ignored_fields/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/bad_skip_ignored_fields/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/custom_ilm_policy/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/413 7 | -------------------------------------------------------------------------------- /test/packages/custom_ilm_policy/data_stream/test/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/custom_ilm_policy/data_stream/test/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/custom_ilm_policy/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/custom_ilm_policy/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/custom_logs/agent/input/input.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths}} 3 | - {{this}} 4 | {{/each}} 5 | 6 | {{#if tags}} 7 | tags: 8 | {{#each tags as |tag i|}} 9 | - {{tag}} 10 | {{/each}} 11 | {{/if}} 12 | 13 | {{#if pipeline}} 14 | pipeline: {{pipeline}} 15 | {{/if}} 16 | 17 | data_stream: 18 | dataset: {{data_stream.dataset}} -------------------------------------------------------------------------------- /test/packages/custom_logs/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.2.0-beta" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/package-spec/pull/325 7 | -------------------------------------------------------------------------------- /test/packages/custom_logs/docs/README.md: -------------------------------------------------------------------------------- 1 | # Custom Logs -------------------------------------------------------------------------------- /test/packages/custom_logs/fields/input.yml: -------------------------------------------------------------------------------- 1 | - name: input.name 2 | type: constant_keyword 3 | description: Sample field to be added. 4 | value: logs -------------------------------------------------------------------------------- /test/packages/custom_logs/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/custom_logs/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent/_dev/deploy/agent/custom-agent.yml: -------------------------------------------------------------------------------- 1 | volumes: 2 | example_volume: 3 | version: "2.3" 4 | services: 5 | docker-custom-agent: 6 | host: pid 7 | user: root 8 | volumes: 9 | - example_volume:/volume_mount_point 10 | -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.1.2 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/335 -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent/data_stream/foo/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: source 2 | title: Source 3 | group: 2 4 | type: group 5 | fields: 6 | - name: geo.city_name 7 | level: core 8 | type: keyword 9 | description: City name. 10 | ignore_above: 1024 -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent/data_stream/foo/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Nginx access logs 2 | -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent/manifest.yml: -------------------------------------------------------------------------------- 1 | format_version: 1.0.0 2 | name: custom_agent 3 | title: Custom Agent 4 | description: This package contains a _dev/deploy/agent folder. 5 | version: 0.1.2 6 | type: integration 7 | release: beta 8 | owner: 9 | github: elastic/foobar -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent_invalid_property/_dev/deploy/agent/custom-agent.yml: -------------------------------------------------------------------------------- 1 | version: "2.3" 2 | services: 3 | docker-custom-agent: 4 | hostname: a-hostname -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent_invalid_property/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.1.2 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/335 -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent_invalid_property/data_stream/foo/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: source 2 | title: Source 3 | group: 2 4 | type: group 5 | fields: 6 | - name: geo.city_name 7 | level: core 8 | type: keyword 9 | description: City name. 10 | ignore_above: 1024 -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent_invalid_property/data_stream/foo/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Nginx access logs 2 | -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent_invalid_property/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent_invalid_property/manifest.yml: -------------------------------------------------------------------------------- 1 | format_version: 1.0.0 2 | name: custom_agent 3 | title: Custom Agent 4 | description: This package contains a _dev/deploy/agent folder. 5 | version: 0.1.2 6 | type: integration 7 | release: beta 8 | owner: 9 | github: elastic/foobar -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent_multi_services/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v8.7.0 4 | -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent_multi_services/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.1.2 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/436 -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent_multi_services/data_stream/memory/_dev/test/system/test-memory-config.yml: -------------------------------------------------------------------------------- 1 | vars: 2 | hosts: 3 | - "oracle://sys:Oradoc_db1@elastic-package-service_oracle_1:1521/ORCLCDB.localdomain?sysdba=1" 4 | -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent_multi_services/data_stream/memory/fields/ecs.yml: -------------------------------------------------------------------------------- 1 | - external: ecs 2 | name: host.ip 3 | - external: ecs 4 | name: ecs.version 5 | - external: ecs 6 | name: service.address 7 | - external: ecs 8 | name: service.type 9 | -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent_multi_services/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/deploy_custom_agent_multi_services/manifest.yml: -------------------------------------------------------------------------------- 1 | format_version: 1.0.0 2 | name: custom_agent 3 | title: Custom Agent 4 | description: This package contains a _dev/deploy/agent folder. 5 | version: 0.1.2 6 | type: integration 7 | release: beta 8 | owner: 9 | github: elastic/foobar -------------------------------------------------------------------------------- /test/packages/deploy_docker/_dev/deploy/docker/docker-compose.d/hi.sh: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | 3 | echo "Hello!" 4 | -------------------------------------------------------------------------------- /test/packages/deploy_docker/_dev/deploy/docker/docker-compose.yml: -------------------------------------------------------------------------------- 1 | version: '2.3' 2 | services: 3 | hello_world: -------------------------------------------------------------------------------- /test/packages/deploy_docker/_dev/deploy/variants.yml: -------------------------------------------------------------------------------- 1 | variants: 2 | foo: 3 | BAR: baz 4 | QUX: 17 5 | default: foo 6 | -------------------------------------------------------------------------------- /test/packages/deploy_docker/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.1.2 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/131 -------------------------------------------------------------------------------- /test/packages/deploy_docker/data_stream/foo/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: source 2 | title: Source 3 | group: 2 4 | type: group 5 | fields: 6 | - name: geo.city_name 7 | level: core 8 | type: keyword 9 | description: City name. 10 | ignore_above: 1024 -------------------------------------------------------------------------------- /test/packages/deploy_docker/data_stream/foo/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Nginx access logs 2 | -------------------------------------------------------------------------------- /test/packages/deploy_docker/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/deploy_docker/manifest.yml: -------------------------------------------------------------------------------- 1 | format_version: 1.0.0 2 | name: bad_deploy_variants 3 | title: Bad Deploy Variants 4 | description: This package contains a bad _dev/deploy folder. 5 | version: 0.1.2 6 | type: integration 7 | release: beta 8 | owner: 9 | github: elastic/foobar -------------------------------------------------------------------------------- /test/packages/deploy_terraform/_dev/deploy/tf/.terraform.lock.hcl: -------------------------------------------------------------------------------- 1 | # This file is maintained automatically by "terraform init". 2 | # Manual edits may be lost in future updates. 3 | 4 | provider "registry.terraform.io/hashicorp/google" { 5 | } 6 | 7 | provider "registry.terraform.io/hashicorp/local" { 8 | } 9 | -------------------------------------------------------------------------------- /test/packages/deploy_terraform/_dev/deploy/tf/data.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": "data file containing json" 3 | } 4 | -------------------------------------------------------------------------------- /test/packages/deploy_terraform/_dev/deploy/tf/files/test.gz.parquet: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/deploy_terraform/_dev/deploy/tf/files/test.gz.parquet -------------------------------------------------------------------------------- /test/packages/deploy_terraform/_dev/deploy/tf/template.tftpl: -------------------------------------------------------------------------------- 1 | A Terraform template file 2 | -------------------------------------------------------------------------------- /test/packages/deploy_terraform/_dev/deploy/variants.yml: -------------------------------------------------------------------------------- 1 | variants: 2 | foo: 3 | BAR: baz 4 | QUX: 17 5 | default: foo 6 | -------------------------------------------------------------------------------- /test/packages/deploy_terraform/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.1.2 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/131 -------------------------------------------------------------------------------- /test/packages/deploy_terraform/data_stream/foo/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: source 2 | title: Source 3 | group: 2 4 | type: group 5 | fields: 6 | - name: geo.city_name 7 | level: core 8 | type: keyword 9 | description: City name. 10 | ignore_above: 1024 -------------------------------------------------------------------------------- /test/packages/deploy_terraform/data_stream/foo/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Nginx access logs 2 | -------------------------------------------------------------------------------- /test/packages/deploy_terraform/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/deploy_terraform/manifest.yml: -------------------------------------------------------------------------------- 1 | format_version: 1.0.0 2 | name: bad_deploy_variants 3 | title: Bad Deploy Variants 4 | description: This package contains a bad _dev/deploy folder. 5 | version: 0.1.2 6 | type: integration 7 | release: beta 8 | owner: 9 | github: elastic/foobar -------------------------------------------------------------------------------- /test/packages/docs_extra_files/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v8.7.0 4 | -------------------------------------------------------------------------------- /test/packages/docs_extra_files/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.1.2 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/131 -------------------------------------------------------------------------------- /test/packages/docs_extra_files/data_stream/pe/fields/base_fields.yml: -------------------------------------------------------------------------------- 1 | - name: data_stream.dataset 2 | external: ecs 3 | - name: data_stream.namespace 4 | external: ecs 5 | - name: data_stream.type 6 | external: ecs 7 | - name: "@timestamp" 8 | external: ecs 9 | -------------------------------------------------------------------------------- /test/packages/docs_extra_files/docs/.missing: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/docs_extra_files/docs/.missing -------------------------------------------------------------------------------- /test/packages/docs_extra_files/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/expanded/data_stream/foo/_dev/test/pipeline/test-access-raw.log-config.yml: -------------------------------------------------------------------------------- 1 | multiline: 2 | first_line_pattern: "^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}" 3 | fields: 4 | "@timestamp": "2020-04-28T11:07:58.223Z" 5 | ecs.version: "1.5.0" 6 | event.category: 7 | - web 8 | -------------------------------------------------------------------------------- /test/packages/expanded/data_stream/foo/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for Microsoft DHCP 3 | 4 | processors: -------------------------------------------------------------------------------- /test/packages/expanded/docs/.empty: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/expanded/docs/.empty -------------------------------------------------------------------------------- /test/packages/good/NOTICE.txt: -------------------------------------------------------------------------------- 1 | Elastic package-spec 2 | Copyright 2021 Elasticsearch B.V. -------------------------------------------------------------------------------- /test/packages/good/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v1.9.2 -------------------------------------------------------------------------------- /test/packages/good/_dev/build/docs/README.md: -------------------------------------------------------------------------------- 1 | This is a template for the package README. -------------------------------------------------------------------------------- /test/packages/good/_dev/deploy/tf/.terraform.lock.hcl: -------------------------------------------------------------------------------- 1 | # This file is maintained automatically by "terraform init". 2 | # Manual edits may be lost in future updates. 3 | 4 | provider "registry.terraform.io/hashicorp/google" { 5 | } 6 | 7 | provider "registry.terraform.io/hashicorp/local" { 8 | } 9 | -------------------------------------------------------------------------------- /test/packages/good/_dev/deploy/tf/data.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": "data file containing json" 3 | } 4 | -------------------------------------------------------------------------------- /test/packages/good/_dev/deploy/tf/main.tf: -------------------------------------------------------------------------------- 1 | # A Terraform file 2 | -------------------------------------------------------------------------------- /test/packages/good/_dev/deploy/tf/template.tftpl: -------------------------------------------------------------------------------- 1 | A Terraform template file 2 | -------------------------------------------------------------------------------- /test/packages/good/data_stream/foo/_dev/benchmark/pipeline/config.yml: -------------------------------------------------------------------------------- 1 | num_docs: 10000 -------------------------------------------------------------------------------- /test/packages/good/data_stream/foo/_dev/deploy/docker/docker-compose.d/hi.sh: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | 3 | echo "Hello!" 4 | -------------------------------------------------------------------------------- /test/packages/good/data_stream/foo/_dev/deploy/docker/docker-compose.yml: -------------------------------------------------------------------------------- 1 | version: '2.3' 2 | services: 3 | hello_world: -------------------------------------------------------------------------------- /test/packages/good/data_stream/foo/_dev/deploy/tf/.terraform.lock.hcl: -------------------------------------------------------------------------------- 1 | # This file is maintained automatically by "terraform init". 2 | # Manual edits may be lost in future updates. 3 | 4 | provider "registry.terraform.io/hashicorp/google" { 5 | } 6 | 7 | provider "registry.terraform.io/hashicorp/local" { 8 | } 9 | -------------------------------------------------------------------------------- /test/packages/good/data_stream/foo/_dev/deploy/tf/data.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": "data file containing json" 3 | } 4 | -------------------------------------------------------------------------------- /test/packages/good/data_stream/foo/_dev/deploy/tf/main.tf: -------------------------------------------------------------------------------- 1 | # A Terraform file 2 | -------------------------------------------------------------------------------- /test/packages/good/data_stream/foo/_dev/deploy/tf/some-module.tf: -------------------------------------------------------------------------------- 1 | hello -------------------------------------------------------------------------------- /test/packages/good/data_stream/foo/_dev/deploy/tf/template.tftpl: -------------------------------------------------------------------------------- 1 | A Terraform template file 2 | -------------------------------------------------------------------------------- /test/packages/good/data_stream/foo/_dev/test/pipeline/test-access-raw.log-config.yml: -------------------------------------------------------------------------------- 1 | fields: 2 | "@timestamp": "2020-04-28T11:07:58.223Z" 3 | ecs.version: "1.5.0" 4 | event.category: 5 | - web 6 | dynamic_fields: 7 | foobar: ".+" 8 | a_numeric_field: "\\d+" 9 | -------------------------------------------------------------------------------- /test/packages/good/data_stream/foo/_dev/test/pipeline/test-common-config.yml: -------------------------------------------------------------------------------- 1 | multiline: 2 | first_line_pattern: "^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}" -------------------------------------------------------------------------------- /test/packages/good/data_stream/foo/_dev/test/system/test-default-config.yml: -------------------------------------------------------------------------------- 1 | wait_for_data_timeout: 10m 2 | skip_ignored_fields: 3 | - error.message 4 | vars: ~ -------------------------------------------------------------------------------- /test/packages/good/data_stream/foo/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for Microsoft DHCP 3 | 4 | processors: 5 | - set: 6 | field: foo 7 | value: bar 8 | -------------------------------------------------------------------------------- /test/packages/good/data_stream/foo/fields/base-fields.yml: -------------------------------------------------------------------------------- 1 | - name: data_stream.type 2 | type: constant_keyword 3 | description: Data stream type. 4 | - name: data_stream.dataset 5 | type: constant_keyword 6 | description: Data stream dataset. 7 | - name: data_stream.namespace 8 | type: constant_keyword 9 | description: Data stream namespace. 10 | -------------------------------------------------------------------------------- /test/packages/good/data_stream/foo/fields/external-fields.yml: -------------------------------------------------------------------------------- 1 | - name: "@timestamp" 2 | external: ecs 3 | - name: event 4 | type: group 5 | description: Event family 6 | fields: 7 | - name: category 8 | external: ecs 9 | -------------------------------------------------------------------------------- /test/packages/good/data_stream/hidden_data_stream/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Hidden data stream and ilm policy overrride 2 | type: metrics 3 | hidden: true 4 | elasticsearch: 5 | index_template.mappings: 6 | dynamic: false 7 | -------------------------------------------------------------------------------- /test/packages/good/data_stream/ilm_policy/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Hidden data stream and ilm policy overrride 2 | type: metrics 3 | ilm_policy: metrics-good.ilm_policy-diagnostics 4 | elasticsearch: 5 | index_template.mappings: 6 | dynamic: false 7 | -------------------------------------------------------------------------------- /test/packages/good/data_stream/k8s_data_stream_no_definitions/_dev/deploy/k8s/.empty: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/good/data_stream/k8s_data_stream_no_definitions/_dev/deploy/k8s/.empty -------------------------------------------------------------------------------- /test/packages/good/data_stream/skipped_tests/_dev/test/static/test-default-config.yml: -------------------------------------------------------------------------------- 1 | skip: 2 | reason: Test was skipped to test skipped test feature in spec. 3 | link: https://github.com/elastic/integrations/issues/0 -------------------------------------------------------------------------------- /test/packages/good/data_stream/skipped_tests/_dev/test/system/test-default-config.yml: -------------------------------------------------------------------------------- 1 | skip: 2 | reason: Test was skipped to test skipped test feature in spec. 3 | link: https://github.com/elastic/integrations/issues/520 4 | input: foo 5 | vars: ~ 6 | data_stream: 7 | vars: 8 | paths: 9 | - "{{SERVICE_LOGS_DIR}}/access.log" 10 | -------------------------------------------------------------------------------- /test/packages/good/data_stream/skipped_tests/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Package with skipped tests 2 | type: metrics 3 | -------------------------------------------------------------------------------- /test/packages/good/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/good/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for ml model 3 | plugins. 4 | processors: 5 | - set: 6 | field: error.message 7 | value: '{{ _ingest.on_failure_message }}' 8 | -------------------------------------------------------------------------------- /test/packages/good/elasticsearch/transform/good_example_bdc_2/manifest.yml: -------------------------------------------------------------------------------- 1 | start: false -------------------------------------------------------------------------------- /test/packages/good/img/kibana-system.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/good/img/kibana-system.png -------------------------------------------------------------------------------- /test/packages/good/img/metricbeat_system_dashboard.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/good/img/metricbeat_system_dashboard.png -------------------------------------------------------------------------------- /test/packages/good/kibana/dashboard/good-dashboard-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "good-dashboard-abc-1", 3 | "type": "dashboard" 4 | } -------------------------------------------------------------------------------- /test/packages/good/kibana/lens/good-lens-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "good-lens-abc-1", 3 | "type": "lens" 4 | } -------------------------------------------------------------------------------- /test/packages/good/kibana/map/good-map-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "good-map-abc-1", 3 | "type": "map" 4 | } -------------------------------------------------------------------------------- /test/packages/good/kibana/search/good-search-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "good-search-abc-1", 3 | "type": "search" 4 | } -------------------------------------------------------------------------------- /test/packages/good/kibana/tag/good-tag-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "attributes": { 3 | "color": "#e20b7f", 4 | "description": "", 5 | "name": "abc" 6 | }, 7 | "coreMigrationVersion": "7.15.0", 8 | "id": "good-tag-abc-1", 9 | "references": [], 10 | "type": "tag" 11 | } 12 | -------------------------------------------------------------------------------- /test/packages/good/kibana/visualization/good-visualization-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "good-visualization-abc-1", 3 | "type": "visualization" 4 | } -------------------------------------------------------------------------------- /test/packages/good_content/docs/README.md: -------------------------------------------------------------------------------- 1 | # Reference package of content type 2 | -------------------------------------------------------------------------------- /test/packages/good_content/img/kibana-system.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/good_content/img/kibana-system.png -------------------------------------------------------------------------------- /test/packages/good_content/validation.yml: -------------------------------------------------------------------------------- 1 | errors: 2 | exclude_checks: 3 | - PSR00001 # Allow to use unreleased features in GA package. 4 | -------------------------------------------------------------------------------- /test/packages/good_input/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v1.9.2 4 | import_mappings: false -------------------------------------------------------------------------------- /test/packages/good_input/_dev/build/docs/README.md: -------------------------------------------------------------------------------- 1 | This is a template for the package README. -------------------------------------------------------------------------------- /test/packages/good_input/_dev/deploy/tf/.terraform.lock.hcl: -------------------------------------------------------------------------------- 1 | # This file is maintained automatically by "terraform init". 2 | # Manual edits may be lost in future updates. 3 | 4 | provider "registry.terraform.io/hashicorp/google" { 5 | } 6 | 7 | provider "registry.terraform.io/hashicorp/local" { 8 | } 9 | -------------------------------------------------------------------------------- /test/packages/good_input/_dev/deploy/tf/data.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": "data file containing json" 3 | } 4 | -------------------------------------------------------------------------------- /test/packages/good_input/_dev/deploy/tf/main.tf: -------------------------------------------------------------------------------- 1 | # A Terraform file 2 | -------------------------------------------------------------------------------- /test/packages/good_input/_dev/deploy/tf/template.tftpl: -------------------------------------------------------------------------------- 1 | A Terraform template file 2 | -------------------------------------------------------------------------------- /test/packages/good_input/_dev/test/config.yml: -------------------------------------------------------------------------------- 1 | system: 2 | parallel: true 3 | policy: 4 | parallel: false 5 | skip: 6 | reason: ignoring all system tests 7 | link: https://github.com/elastic/package-spec/issues/1 8 | -------------------------------------------------------------------------------- /test/packages/good_input/_dev/test/policy/test-mysql.yml: -------------------------------------------------------------------------------- 1 | vars: 2 | hosts: 3 | - root:test@tcp(localhost:3306)/ 4 | sql_query: "SHOW GLOBAL STATUS LIKE 'Innodb_%';" 5 | -------------------------------------------------------------------------------- /test/packages/good_input/_dev/test/policy/test-oracle.yml: -------------------------------------------------------------------------------- 1 | vars: 2 | driver: "oracle" 3 | hosts: 4 | - root:test@tcp(localhost)/ 5 | # FIXME: This doesn't work as a multiline block. 6 | sql_query: SELECT file_name, file_id, tablespace_name, bytes, status, maxbytes, user_bytes, online_status FROM sys.dba_data_files 7 | -------------------------------------------------------------------------------- /test/packages/good_input/_dev/test/system/test-default-config.yml: -------------------------------------------------------------------------------- 1 | wait_for_data_timeout: 10m 2 | vars: ~ 3 | -------------------------------------------------------------------------------- /test/packages/good_input/agent/input/input.yml.hbs: -------------------------------------------------------------------------------- 1 | metricsets: ["query"] 2 | period: {{period}} 3 | hosts: 4 | {{#each hosts}} 5 | - {{this}} 6 | {{/each}} 7 | driver: {{driver}} 8 | sql_query: {{sql_query} 9 | sql_response_format: {{sql_response_format}} -------------------------------------------------------------------------------- /test/packages/good_input/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/package-spec/pull/455 7 | -------------------------------------------------------------------------------- /test/packages/good_input/docs/README.md: -------------------------------------------------------------------------------- 1 | # SQL Input -------------------------------------------------------------------------------- /test/packages/good_input/fields/input.yml: -------------------------------------------------------------------------------- 1 | - name: input.name 2 | type: constant_keyword 3 | description: Sample field to be added. 4 | value: logs 5 | - name: foo 6 | runtime: true 7 | type: keyword 8 | -------------------------------------------------------------------------------- /test/packages/good_input/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/good_input/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/good_input/lifecycle.yml: -------------------------------------------------------------------------------- 1 | data_retention: "30d" 2 | -------------------------------------------------------------------------------- /test/packages/good_v2/NOTICE.txt: -------------------------------------------------------------------------------- 1 | Elastic package-spec 2 | Copyright 2021 Elasticsearch B.V. -------------------------------------------------------------------------------- /test/packages/good_v2/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v8.6.0 4 | import_mappings: true 5 | -------------------------------------------------------------------------------- /test/packages/good_v2/_dev/build/docs/README.md: -------------------------------------------------------------------------------- 1 | This is a template for the package README. -------------------------------------------------------------------------------- /test/packages/good_v2/_dev/deploy/tf/.terraform.lock.hcl: -------------------------------------------------------------------------------- 1 | # This file is maintained automatically by "terraform init". 2 | # Manual edits may be lost in future updates. 3 | 4 | provider "registry.terraform.io/hashicorp/google" { 5 | } 6 | 7 | provider "registry.terraform.io/hashicorp/local" { 8 | } 9 | -------------------------------------------------------------------------------- /test/packages/good_v2/_dev/deploy/tf/data.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": "data file containing json" 3 | } 4 | -------------------------------------------------------------------------------- /test/packages/good_v2/_dev/deploy/tf/main.tf: -------------------------------------------------------------------------------- 1 | # A Terraform file 2 | -------------------------------------------------------------------------------- /test/packages/good_v2/_dev/deploy/tf/template.tftpl: -------------------------------------------------------------------------------- 1 | A Terraform template file 2 | -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/foo/_dev/benchmark/pipeline/config.yml: -------------------------------------------------------------------------------- 1 | num_docs: 10000 -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/foo/_dev/deploy/docker/docker-compose.d/hi.sh: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | 3 | echo "Hello!" 4 | -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/foo/_dev/deploy/docker/docker-compose.yml: -------------------------------------------------------------------------------- 1 | version: '2.3' 2 | services: 3 | hello_world: -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/foo/_dev/deploy/tf/.terraform.lock.hcl: -------------------------------------------------------------------------------- 1 | # This file is maintained automatically by "terraform init". 2 | # Manual edits may be lost in future updates. 3 | 4 | provider "registry.terraform.io/hashicorp/google" { 5 | } 6 | 7 | provider "registry.terraform.io/hashicorp/local" { 8 | } 9 | -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/foo/_dev/deploy/tf/data.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": "data file containing json" 3 | } 4 | -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/foo/_dev/deploy/tf/main.tf: -------------------------------------------------------------------------------- 1 | # A Terraform file 2 | -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/foo/_dev/deploy/tf/some-module.tf: -------------------------------------------------------------------------------- 1 | hello -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/foo/_dev/deploy/tf/template.tftpl: -------------------------------------------------------------------------------- 1 | A Terraform template file 2 | -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/foo/_dev/test/pipeline/test-access-raw.log-config.yml: -------------------------------------------------------------------------------- 1 | fields: 2 | "@timestamp": "2020-04-28T11:07:58.223Z" 3 | ecs.version: "1.5.0" 4 | event.category: 5 | - web 6 | dynamic_fields: 7 | foobar: ".+" 8 | a_numeric_field: "\\d+" 9 | -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/foo/_dev/test/pipeline/test-common-config.yml: -------------------------------------------------------------------------------- 1 | multiline: 2 | first_line_pattern: "^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}" -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/foo/_dev/test/system/test-default-config.yml: -------------------------------------------------------------------------------- 1 | wait_for_data_timeout: 10m 2 | vars: ~ -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/foo/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for Microsoft DHCP 3 | 4 | processors: 5 | - rename: 6 | field: foo 7 | target_field: message 8 | ignore_missing: true 9 | -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/foo/fields/base-fields.yml: -------------------------------------------------------------------------------- 1 | - name: data_stream.type 2 | type: constant_keyword 3 | description: Data stream type. 4 | - name: data_stream.dataset 5 | type: constant_keyword 6 | description: Data stream dataset. 7 | - name: data_stream.namespace 8 | type: constant_keyword 9 | description: Data stream namespace. 10 | -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/foo/fields/external-fields.yml: -------------------------------------------------------------------------------- 1 | - name: "@timestamp" 2 | external: ecs 3 | - name: event 4 | type: group 5 | description: Event family 6 | fields: 7 | - name: category 8 | external: ecs 9 | -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/foo/lifecycle.yml: -------------------------------------------------------------------------------- 1 | data_retention: "7d" 2 | -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/hidden_data_stream/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Hidden data stream and ilm policy overrride 2 | type: metrics 3 | hidden: true 4 | elasticsearch: 5 | index_template.mappings: 6 | dynamic: false 7 | -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/ilm_policy/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Hidden data stream and ilm policy overrride 2 | type: metrics 3 | ilm_policy: metrics-good_v2.ilm_policy-diagnostics 4 | elasticsearch: 5 | index_template.mappings: 6 | dynamic: false 7 | -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/k8s_data_stream_no_definitions/_dev/deploy/k8s/.empty: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/good_v2/data_stream/k8s_data_stream_no_definitions/_dev/deploy/k8s/.empty -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/routing_rules/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/routing_rules/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/skipped_tests/_dev/test/static/test-default-config.yml: -------------------------------------------------------------------------------- 1 | skip: 2 | reason: Test was skipped to test skipped test feature in spec. 3 | link: https://github.com/elastic/integrations/issues/0 -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/skipped_tests/_dev/test/system/test-default-config.yml: -------------------------------------------------------------------------------- 1 | skip: 2 | reason: Test was skipped to test skipped test feature in spec. 3 | link: https://github.com/elastic/integrations/issues/520 4 | input: foo 5 | vars: ~ 6 | data_stream: 7 | vars: 8 | paths: 9 | - "{{SERVICE_LOGS_DIR}}/access.log" 10 | -------------------------------------------------------------------------------- /test/packages/good_v2/data_stream/skipped_tests/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Package with skipped tests 2 | type: metrics 3 | -------------------------------------------------------------------------------- /test/packages/good_v2/docs/README.md: -------------------------------------------------------------------------------- 1 | This is a template for the package README. -------------------------------------------------------------------------------- /test/packages/good_v2/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for ml model 3 | plugins. 4 | processors: 5 | - set: 6 | field: error.message 7 | value: '{{ _ingest.on_failure_message }}' 8 | -------------------------------------------------------------------------------- /test/packages/good_v2/elasticsearch/transform/good_example_bdc_2/manifest.yml: -------------------------------------------------------------------------------- 1 | start: false -------------------------------------------------------------------------------- /test/packages/good_v2/img/kibana-system.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/good_v2/img/kibana-system.png -------------------------------------------------------------------------------- /test/packages/good_v2/img/metricbeat_system_dashboard.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/good_v2/img/metricbeat_system_dashboard.png -------------------------------------------------------------------------------- /test/packages/good_v2/kibana/dashboard/good_v2-dashboard-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "good_v2-dashboard-abc-1", 3 | "type": "dashboard" 4 | } -------------------------------------------------------------------------------- /test/packages/good_v2/kibana/lens/good_v2-lens-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "good_v2-lens-abc-1", 3 | "type": "lens" 4 | } -------------------------------------------------------------------------------- /test/packages/good_v2/kibana/map/good_v2-map-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "good_v2-map-abc-1", 3 | "type": "map" 4 | } -------------------------------------------------------------------------------- /test/packages/good_v2/kibana/search/good_v2-search-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "good_v2-search-abc-1", 3 | "type": "search" 4 | } -------------------------------------------------------------------------------- /test/packages/good_v2/kibana/tag/good_v2-tag-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "attributes": { 3 | "color": "#e20b7f", 4 | "description": "", 5 | "name": "abc" 6 | }, 7 | "coreMigrationVersion": "7.15.0", 8 | "id": "good_v2-tag-abc-1", 9 | "references": [], 10 | "type": "tag" 11 | } 12 | -------------------------------------------------------------------------------- /test/packages/good_v2/kibana/visualization/good_v2-visualization-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "good_v2-visualization-abc-1", 3 | "type": "visualization" 4 | } -------------------------------------------------------------------------------- /test/packages/good_v3/NOTICE.txt: -------------------------------------------------------------------------------- 1 | Elastic package-spec 2 | Copyright 2021 Elasticsearch B.V. -------------------------------------------------------------------------------- /test/packages/good_v3/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v8.6.0 4 | import_mappings: true 5 | -------------------------------------------------------------------------------- /test/packages/good_v3/_dev/build/docs/README.md: -------------------------------------------------------------------------------- 1 | This is a template for the package README. -------------------------------------------------------------------------------- /test/packages/good_v3/_dev/deploy/tf/.terraform.lock.hcl: -------------------------------------------------------------------------------- 1 | # This file is maintained automatically by "terraform init". 2 | # Manual edits may be lost in future updates. 3 | 4 | provider "registry.terraform.io/hashicorp/google" { 5 | } 6 | 7 | provider "registry.terraform.io/hashicorp/local" { 8 | } 9 | -------------------------------------------------------------------------------- /test/packages/good_v3/_dev/deploy/tf/data.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": "data file containing json" 3 | } -------------------------------------------------------------------------------- /test/packages/good_v3/_dev/deploy/tf/main.tf: -------------------------------------------------------------------------------- 1 | # A Terraform file 2 | -------------------------------------------------------------------------------- /test/packages/good_v3/_dev/deploy/tf/template.tftpl: -------------------------------------------------------------------------------- 1 | A Terraform template file 2 | -------------------------------------------------------------------------------- /test/packages/good_v3/_dev/shared/base-fields.yml: -------------------------------------------------------------------------------- 1 | - name: data_stream.type 2 | type: constant_keyword 3 | description: Data stream type. 4 | - name: data_stream.dataset 5 | type: constant_keyword 6 | description: Data stream dataset. 7 | - name: data_stream.namespace 8 | type: constant_keyword 9 | description: Data stream namespace. 10 | -------------------------------------------------------------------------------- /test/packages/good_v3/_dev/test/config.yml: -------------------------------------------------------------------------------- 1 | system: 2 | parallel: true 3 | skip: 4 | reason: ignoring all system tests 5 | link: https://github.com/elastic/package-spec/issues/1 6 | pipeline: 7 | parallel: false 8 | asset: 9 | parallel: false 10 | policy: 11 | parallel: false 12 | static: 13 | parallel: false 14 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/agent_settings/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/agent_settings/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' 11 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/ecs_import_mappings/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/ecs_import_mappings/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' 11 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/foo/_dev/benchmark/pipeline/config.yml: -------------------------------------------------------------------------------- 1 | num_docs: 10000 2 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/foo/_dev/deploy/docker/docker-compose.d/hi.sh: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | 3 | echo "Hello!" 4 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/foo/_dev/deploy/docker/docker-compose.yml: -------------------------------------------------------------------------------- 1 | version: '2.3' 2 | services: 3 | hello_world: 4 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/foo/_dev/deploy/tf/.terraform.lock.hcl: -------------------------------------------------------------------------------- 1 | # This file is maintained automatically by "terraform init". 2 | # Manual edits may be lost in future updates. 3 | 4 | provider "registry.terraform.io/hashicorp/google" { 5 | } 6 | 7 | provider "registry.terraform.io/hashicorp/local" { 8 | } 9 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/foo/_dev/deploy/tf/data.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": "data file containing json" 3 | } -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/foo/_dev/deploy/tf/main.tf: -------------------------------------------------------------------------------- 1 | # A Terraform file 2 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/foo/_dev/deploy/tf/some-module.tf: -------------------------------------------------------------------------------- 1 | hello -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/foo/_dev/deploy/tf/template.tftpl: -------------------------------------------------------------------------------- 1 | A Terraform template file 2 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/foo/_dev/test/pipeline/test-access-raw.log-config.yml: -------------------------------------------------------------------------------- 1 | fields: 2 | "@timestamp": "2020-04-28T11:07:58.223Z" 3 | ecs.version: "1.5.0" 4 | event.category: 5 | - web 6 | dynamic_fields: 7 | foobar: ".+" 8 | a_numeric_field: "\\d+" 9 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/foo/_dev/test/pipeline/test-common-config.yml: -------------------------------------------------------------------------------- 1 | multiline: 2 | first_line_pattern: "^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}" 3 | numeric_keyword_fields: 4 | - "foo.code" 5 | string_number_fields: 6 | - "foo.count" 7 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/foo/_dev/test/policy/test-default.yml: -------------------------------------------------------------------------------- 1 | data_stream: 2 | vars: 3 | paths: 4 | - "/var/logs/apache/access.log*" 5 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/foo/_dev/test/system/test-default-config.yml: -------------------------------------------------------------------------------- 1 | wait_for_data_timeout: 10m 2 | skip_ignored_fields: 3 | - error.message 4 | vars: ~ 5 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/foo/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for Microsoft DHCP 3 | 4 | processors: 5 | - rename: 6 | field: foo 7 | target_field: message 8 | ignore_missing: true 9 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/foo/fields/base-fields.yml.link: -------------------------------------------------------------------------------- 1 | ../../../_dev/shared/base-fields.yml 092c60ec1f7725d278aa0564d946f6803736c436239c4ca20049013a4ce8e91c 2 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/foo/fields/external-fields.yml: -------------------------------------------------------------------------------- 1 | - name: "@timestamp" 2 | external: ecs 3 | - name: event 4 | type: group 5 | description: Event family 6 | fields: 7 | - name: category 8 | external: ecs 9 | - name: timeseries 10 | external: ecs 11 | metric_type: gauge 12 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/foo/lifecycle.yml: -------------------------------------------------------------------------------- 1 | data_retention: "7d" 2 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/hidden_data_stream/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Hidden data stream and ilm policy overrride 2 | type: metrics 3 | hidden: true 4 | elasticsearch: 5 | index_template: 6 | mappings: 7 | dynamic: false 8 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/ilm_policy/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Hidden data stream and ilm policy overrride 2 | type: metrics 3 | ilm_policy: metrics-good_v3.ilm_policy-diagnostics 4 | elasticsearch: 5 | index_template: 6 | mappings: 7 | dynamic: false 8 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/k8s_data_stream_no_definitions/_dev/deploy/k8s/.empty: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/good_v3/data_stream/k8s_data_stream_no_definitions/_dev/deploy/k8s/.empty -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/rename_message/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/root/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/root/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' 11 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/routing_rules/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/routing_rules/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/skipped_tests/_dev/test/static/test-default-config.yml: -------------------------------------------------------------------------------- 1 | skip: 2 | reason: Test was skipped to test skipped test feature in spec. 3 | link: https://github.com/elastic/integrations/issues/0 4 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/skipped_tests/_dev/test/system/test-default-config.yml: -------------------------------------------------------------------------------- 1 | skip: 2 | reason: Test was skipped to test skipped test feature in spec. 3 | link: https://github.com/elastic/integrations/issues/520 4 | input: foo 5 | vars: ~ 6 | data_stream: 7 | vars: 8 | paths: 9 | - "{{SERVICE_LOGS_DIR}}/access.log" 10 | -------------------------------------------------------------------------------- /test/packages/good_v3/data_stream/skipped_tests/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Package with skipped tests 2 | type: metrics 3 | -------------------------------------------------------------------------------- /test/packages/good_v3/docs/README.md: -------------------------------------------------------------------------------- 1 | This is a template for the package README. -------------------------------------------------------------------------------- /test/packages/good_v3/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for ml model 3 | plugins. 4 | processors: 5 | - set: 6 | field: error.message 7 | value: '{{ _ingest.on_failure_message }}' 8 | - terminate: 9 | -------------------------------------------------------------------------------- /test/packages/good_v3/elasticsearch/transform/good_example_bdc_2/manifest.yml: -------------------------------------------------------------------------------- 1 | start: false 2 | -------------------------------------------------------------------------------- /test/packages/good_v3/img/kibana-system.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/good_v3/img/kibana-system.png -------------------------------------------------------------------------------- /test/packages/good_v3/img/metricbeat_system_dashboard.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/good_v3/img/metricbeat_system_dashboard.png -------------------------------------------------------------------------------- /test/packages/good_v3/kibana/lens/good_v3-lens-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "good_v3-lens-abc-1", 3 | "type": "lens" 4 | } -------------------------------------------------------------------------------- /test/packages/good_v3/kibana/map/good_v3-map-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "good_v3-map-abc-1", 3 | "type": "map" 4 | } -------------------------------------------------------------------------------- /test/packages/good_v3/kibana/search/good_v3-search-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "good_v3-search-abc-1", 3 | "type": "search" 4 | } -------------------------------------------------------------------------------- /test/packages/good_v3/kibana/tag/good_v3-tag-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "attributes": { 3 | "color": "#e20b7f", 4 | "description": "", 5 | "name": "abc" 6 | }, 7 | "coreMigrationVersion": "7.15.0", 8 | "id": "good_v3-tag-abc-1", 9 | "references": [], 10 | "type": "tag" 11 | } -------------------------------------------------------------------------------- /test/packages/good_v3/validation.yml: -------------------------------------------------------------------------------- 1 | errors: 2 | exclude_checks: 3 | - PSR00001 # Allow to use unreleased features in GA package. 4 | -------------------------------------------------------------------------------- /test/packages/httpjson_input/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.2.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/package-spec/pull/325 7 | -------------------------------------------------------------------------------- /test/packages/httpjson_input/docs/README.md: -------------------------------------------------------------------------------- 1 | # HTTPJSON input -------------------------------------------------------------------------------- /test/packages/httpjson_input/fields/input.yml: -------------------------------------------------------------------------------- 1 | - name: input.type 2 | description: Type of Filebeat input. 3 | type: keyword 4 | - name: tags 5 | type: keyword 6 | description: User defined tags -------------------------------------------------------------------------------- /test/packages/httpjson_input/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/httpjson_input/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/icons_dark_mode/NOTICE.txt: -------------------------------------------------------------------------------- 1 | Elastic package-spec 2 | Copyright Elasticsearch B.V. 3 | -------------------------------------------------------------------------------- /test/packages/icons_dark_mode/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v8.0.0 4 | -------------------------------------------------------------------------------- /test/packages/icons_dark_mode/_dev/build/docs/README.md: -------------------------------------------------------------------------------- 1 | This is a template for the package README. -------------------------------------------------------------------------------- /test/packages/icons_dark_mode/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/ignored_malformed/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/ignored_malformed/data_stream/foo/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/ignored_malformed/data_stream/foo/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: my_custom_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/ignored_malformed/data_stream/foo/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: my_custom_field 2 | type: integer 3 | ignore_malformed: true -------------------------------------------------------------------------------- /test/packages/ignored_malformed/data_stream/foo/manifest.yml: -------------------------------------------------------------------------------- 1 | title: "Foo" 2 | type: logs 3 | streams: 4 | - input: logfile 5 | title: Sample logs 6 | description: Collect sample logs 7 | vars: 8 | - name: paths 9 | type: text 10 | title: Paths 11 | multi: true 12 | default: 13 | - /var/log/*.log 14 | -------------------------------------------------------------------------------- /test/packages/ignored_malformed/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/ignored_malformed/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/inconsistent_version/docs/README.md: -------------------------------------------------------------------------------- 1 | # Inconsistent Version 2 | 3 | This is a new integration created using the [elastic-package](https://github.com/elastic/elastic-package) tool. 4 | 5 | Consider using the README template file `_dev/build/docs/README.md`to generate a list of exported fields or include a sample event. -------------------------------------------------------------------------------- /test/packages/input_groups/_dev/build/docs/README.md: -------------------------------------------------------------------------------- 1 | README for integration -------------------------------------------------------------------------------- /test/packages/input_groups/_dev/build/docs/dynamodb.md: -------------------------------------------------------------------------------- 1 | DynamoDB README template file -------------------------------------------------------------------------------- /test/packages/input_groups/_dev/build/docs/ec2.md: -------------------------------------------------------------------------------- 1 | EC2 README template file -------------------------------------------------------------------------------- /test/packages/input_groups/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.3.17 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/1 6 | -------------------------------------------------------------------------------- /test/packages/input_groups/data_stream/dynamodb/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | # Handlebars template for agent -------------------------------------------------------------------------------- /test/packages/input_groups/data_stream/dynamodb/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: aws.dynamodb 2 | type: group -------------------------------------------------------------------------------- /test/packages/input_groups/data_stream/ec2_logs/agent/stream/s3.yml.hbs: -------------------------------------------------------------------------------- 1 | # Handlebars template for agent -------------------------------------------------------------------------------- /test/packages/input_groups/data_stream/ec2_logs/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: "Pipeline for EC2 logs in CloudWatch" -------------------------------------------------------------------------------- /test/packages/input_groups/data_stream/ec2_logs/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: aws.ec2 2 | type: group -------------------------------------------------------------------------------- /test/packages/input_groups/data_stream/ec2_metrics/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | # Handlebars template for agent -------------------------------------------------------------------------------- /test/packages/input_groups/data_stream/ec2_metrics/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: aws.ec2 2 | type: group -------------------------------------------------------------------------------- /test/packages/input_groups/data_stream/spamfirewall/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | # Stream Handlebars template -------------------------------------------------------------------------------- /test/packages/input_groups/data_stream/spamfirewall/agent/stream/tcp.yml.hbs: -------------------------------------------------------------------------------- 1 | # TCP Handlebars template -------------------------------------------------------------------------------- /test/packages/input_groups/data_stream/spamfirewall/agent/stream/udp.yml.hbs: -------------------------------------------------------------------------------- 1 | # UDP Handlebars template -------------------------------------------------------------------------------- /test/packages/input_groups/data_stream/spamfirewall/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for Barracuda Spam Firewall -------------------------------------------------------------------------------- /test/packages/input_groups/data_stream/spamfirewall/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: rsa 2 | type: group -------------------------------------------------------------------------------- /test/packages/input_groups/docs/README.md: -------------------------------------------------------------------------------- 1 | README for integration -------------------------------------------------------------------------------- /test/packages/input_groups/docs/dynamodb.md: -------------------------------------------------------------------------------- 1 | DynamoDB README file -------------------------------------------------------------------------------- /test/packages/input_groups/docs/ec2.md: -------------------------------------------------------------------------------- 1 | EC2 README file -------------------------------------------------------------------------------- /test/packages/input_groups/img/aws-dynamodb-overview.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/input_groups/img/aws-dynamodb-overview.png -------------------------------------------------------------------------------- /test/packages/input_groups/img/aws-ec2-overview.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/input_groups/img/aws-ec2-overview.png -------------------------------------------------------------------------------- /test/packages/input_groups/img/aws-general-dashboard.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/input_groups/img/aws-general-dashboard.png -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v8.7.0 4 | -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/_dev/build/docs/README.md: -------------------------------------------------------------------------------- 1 | README for integration -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/_dev/build/docs/dynamodb.md: -------------------------------------------------------------------------------- 1 | DynamoDB README template file -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/_dev/build/docs/ec2.md: -------------------------------------------------------------------------------- 1 | EC2 README template file -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.3.17 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/143 6 | -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/data_stream/dynamodb/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | # Handlebars template for agent -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/data_stream/dynamodb/fields/base_fields.yml: -------------------------------------------------------------------------------- 1 | - name: data_stream.dataset 2 | external: ecs 3 | - name: data_stream.namespace 4 | external: ecs 5 | - name: data_stream.type 6 | external: ecs 7 | - name: "@timestamp" 8 | external: ecs 9 | -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/data_stream/dynamodb/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: aws.dynamodb 2 | type: group -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/data_stream/ec2_logs/agent/stream/s3.yml.hbs: -------------------------------------------------------------------------------- 1 | # Handlebars template for agent -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/data_stream/ec2_logs/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: "Pipeline for EC2 logs in CloudWatch" -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/data_stream/ec2_logs/fields/base_fields.yml: -------------------------------------------------------------------------------- 1 | - name: data_stream.dataset 2 | external: ecs 3 | - name: data_stream.namespace 4 | external: ecs 5 | - name: data_stream.type 6 | external: ecs 7 | - name: "@timestamp" 8 | external: ecs 9 | -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/data_stream/ec2_logs/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: aws.ec2 2 | type: group -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/data_stream/ec2_metrics/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | # Handlebars template for agent -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/data_stream/ec2_metrics/fields/base_fields.yml: -------------------------------------------------------------------------------- 1 | - name: data_stream.dataset 2 | external: ecs 3 | - name: data_stream.namespace 4 | external: ecs 5 | - name: data_stream.type 6 | external: ecs 7 | - name: "@timestamp" 8 | external: ecs 9 | -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/data_stream/ec2_metrics/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: aws.ec2 2 | type: group -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/docs/README.md: -------------------------------------------------------------------------------- 1 | README for integration -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/docs/dynamodb.md: -------------------------------------------------------------------------------- 1 | DynamoDB README file -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/docs/ec2.md: -------------------------------------------------------------------------------- 1 | EC2 README file -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/img/aws-dynamodb-overview.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/input_groups_bad_data_stream/img/aws-dynamodb-overview.png -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/img/aws-ec2-overview.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/input_groups_bad_data_stream/img/aws-ec2-overview.png -------------------------------------------------------------------------------- /test/packages/input_groups_bad_data_stream/img/aws-general-dashboard.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/input_groups_bad_data_stream/img/aws-general-dashboard.png -------------------------------------------------------------------------------- /test/packages/input_template/agent/input/example.yml.hbs: -------------------------------------------------------------------------------- 1 | group: 2 | field1: {{var1}} 3 | field2: {{var2}} -------------------------------------------------------------------------------- /test/packages/input_template/agent/input/template.yml.hbs: -------------------------------------------------------------------------------- 1 | {} -------------------------------------------------------------------------------- /test/packages/input_template/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.1.2 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/131 -------------------------------------------------------------------------------- /test/packages/input_template/data_stream/nothing/fields/nothing.yml: -------------------------------------------------------------------------------- 1 | - name: nothing 2 | type: keyword -------------------------------------------------------------------------------- /test/packages/input_template/data_stream/nothing/manifest.yml: -------------------------------------------------------------------------------- 1 | title: nothing, really -------------------------------------------------------------------------------- /test/packages/input_template/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/integration_benchmarks/_dev/benchmark/system/deploy/tf/.terraform.lock.hcl: -------------------------------------------------------------------------------- 1 | # This file is maintained automatically by "terraform init". 2 | # Manual edits may be lost in future updates. 3 | 4 | provider "registry.terraform.io/hashicorp/google" { 5 | } 6 | 7 | provider "registry.terraform.io/hashicorp/local" { 8 | } 9 | -------------------------------------------------------------------------------- /test/packages/integration_benchmarks/_dev/benchmark/system/deploy/tf/data.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": "data file containing json" 3 | } 4 | -------------------------------------------------------------------------------- /test/packages/integration_benchmarks/_dev/benchmark/system/deploy/tf/main.tf: -------------------------------------------------------------------------------- 1 | # A Terraform file 2 | -------------------------------------------------------------------------------- /test/packages/integration_benchmarks/_dev/benchmark/system/deploy/tf/template.tftpl: -------------------------------------------------------------------------------- 1 | A Terraform template file 2 | -------------------------------------------------------------------------------- /test/packages/integration_benchmarks/_dev/benchmark/system/deploy/variants.yml: -------------------------------------------------------------------------------- 1 | variants: 2 | foo: 3 | BAR: baz 4 | QUX: 17 5 | default: foo 6 | -------------------------------------------------------------------------------- /test/packages/integration_benchmarks/_dev/benchmark/system/tcp-benchmark/template.log: -------------------------------------------------------------------------------- 1 | {{.IP}} - - [{{.Day}}/{{.Mon}}/2022:{{.H}}:{{.MS}}:{{.MS}} +0200] "GET /favicon.ico HTTP/1.1" {{.StatusCode}} {{.Size}} "http://{{.Hostname}}:{{.Port}}/" "skip-this-one/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.59 Safari/537.36" -------------------------------------------------------------------------------- /test/packages/integration_benchmarks/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.0.1 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/492 -------------------------------------------------------------------------------- /test/packages/integration_benchmarks/data_stream/foo/fields/fields.yml: -------------------------------------------------------------------------------- 1 | - name: source 2 | title: Source 3 | group: 2 4 | type: group 5 | fields: 6 | - name: geo.city_name 7 | level: core 8 | type: keyword 9 | description: City name. 10 | ignore_above: 1024 -------------------------------------------------------------------------------- /test/packages/integration_benchmarks/data_stream/foo/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Nginx access logs 2 | -------------------------------------------------------------------------------- /test/packages/integration_benchmarks/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/integration_benchmarks/manifest.yml: -------------------------------------------------------------------------------- 1 | format_version: 1.0.0 2 | name: integration_benchmarks 3 | title: Integration benchmarks 4 | description: This package contains a _dev/benchmarks folder. 5 | version: 0.0.1 6 | type: integration 7 | release: beta 8 | owner: 9 | github: elastic/foobar -------------------------------------------------------------------------------- /test/packages/invalid_field_for_version/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/invalid_field_for_version/data_stream/foo/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | metricsets: ["sample_metricset"] 2 | hosts: 3 | {{#each hosts}} 4 | - {{this}} 5 | {{/each}} 6 | period: {{period}} 7 | -------------------------------------------------------------------------------- /test/packages/invalid_field_for_version/data_stream/foo/manifest.yml: -------------------------------------------------------------------------------- 1 | title: "Foo" 2 | type: metrics 3 | streams: 4 | - input: sample/metrics 5 | title: Sample metrics 6 | description: Collect sample metrics 7 | vars: 8 | - name: period 9 | type: text 10 | title: Period 11 | default: 10s 12 | -------------------------------------------------------------------------------- /test/packages/invalid_field_for_version/docs/README.md: -------------------------------------------------------------------------------- 1 | # This package has a field that was removed in 2.0.0 2 | 3 | This is a new integration created using the [elastic-package](https://github.com/elastic/elastic-package) tool. 4 | 5 | Consider using the README template file `_dev/build/docs/README.md`to generate a list of exported fields or include a sample event. -------------------------------------------------------------------------------- /test/packages/invalid_field_for_version/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/invalid_field_for_version/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/kibana_configuration_links/NOTICE.txt: -------------------------------------------------------------------------------- 1 | Elastic package-spec 2 | Copyright 2021 Elasticsearch B.V. -------------------------------------------------------------------------------- /test/packages/kibana_configuration_links/docs/README.md: -------------------------------------------------------------------------------- 1 | This is a template for the package README. -------------------------------------------------------------------------------- /test/packages/kibana_configuration_links/img/kibana-system.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/kibana_configuration_links/img/kibana-system.png -------------------------------------------------------------------------------- /test/packages/kibana_configuration_links/img/metricbeat_system_dashboard.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/kibana_configuration_links/img/metricbeat_system_dashboard.png -------------------------------------------------------------------------------- /test/packages/kibana_legacy_visualizations/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.1.2 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/160 -------------------------------------------------------------------------------- /test/packages/kibana_legacy_visualizations/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/kibana_legacy_visualizations/manifest.yml: -------------------------------------------------------------------------------- 1 | format_version: 3.0.0 2 | name: kibana_legacy_visualizations 3 | title: Kibana Legacy Visualizations 4 | description: This package contains a set of legacy and non-legacy Kibana assets 5 | version: 0.1.2 6 | type: integration 7 | owner: 8 | github: elastic/foobar 9 | type: elastic 10 | -------------------------------------------------------------------------------- /test/packages/kibana_legacy_visualizations/validation.yml: -------------------------------------------------------------------------------- 1 | errors: 2 | exclude_checks: 3 | - SVR00004 # References in dashboards. 4 | -------------------------------------------------------------------------------- /test/packages/logs_synthetic_mode/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0-beta1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/logs_synthetic_mode/data_stream/synthetic/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/logs_synthetic_mode/data_stream/synthetic/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' 11 | -------------------------------------------------------------------------------- /test/packages/logs_synthetic_mode/data_stream/synthetic/fields/some-fields.yml: -------------------------------------------------------------------------------- 1 | - name: decision_id 2 | # Checking with a long field because for text fields "store" is enabled by 3 | # default since 8.18. 4 | type: long 5 | store: true 6 | -------------------------------------------------------------------------------- /test/packages/logs_synthetic_mode/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/logs_synthetic_mode/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/missing_data_stream/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.1.2 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/131 -------------------------------------------------------------------------------- /test/packages/missing_data_stream/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/missing_image_files/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v8.7.0 4 | -------------------------------------------------------------------------------- /test/packages/missing_image_files/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.1.2 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/131 -------------------------------------------------------------------------------- /test/packages/missing_image_files/data_stream/pe/fields/base_fields.yml: -------------------------------------------------------------------------------- 1 | - name: data_stream.dataset 2 | external: ecs 3 | - name: data_stream.namespace 4 | external: ecs 5 | - name: data_stream.type 6 | external: ecs 7 | - name: "@timestamp" 8 | external: ecs 9 | -------------------------------------------------------------------------------- /test/packages/missing_image_files/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/missing_image_files/img/metricbeat_system_dashboard.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/missing_image_files/img/metricbeat_system_dashboard.png -------------------------------------------------------------------------------- /test/packages/missing_pipeline_dashes/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v8.7.0 4 | -------------------------------------------------------------------------------- /test/packages/missing_pipeline_dashes/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.1.2 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/131 -------------------------------------------------------------------------------- /test/packages/missing_pipeline_dashes/data_stream/foo/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | description: No dashes here 2 | 3 | processors: -------------------------------------------------------------------------------- /test/packages/missing_pipeline_dashes/data_stream/foo/fields/base_fields.yml: -------------------------------------------------------------------------------- 1 | - name: data_stream.dataset 2 | external: ecs 3 | - name: data_stream.namespace 4 | external: ecs 5 | - name: data_stream.type 6 | external: ecs 7 | - name: "@timestamp" 8 | external: ecs 9 | -------------------------------------------------------------------------------- /test/packages/missing_pipeline_dashes/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/missing_required_fields/NOTICE.txt: -------------------------------------------------------------------------------- 1 | Elastic package-spec 2 | Copyright 2021 Elasticsearch B.V. -------------------------------------------------------------------------------- /test/packages/missing_required_fields/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v1.9.2 -------------------------------------------------------------------------------- /test/packages/missing_required_fields/_dev/build/docs/README.md: -------------------------------------------------------------------------------- 1 | This is a template for the package README. -------------------------------------------------------------------------------- /test/packages/missing_required_fields/_dev/deploy/tf/.terraform.lock.hcl: -------------------------------------------------------------------------------- 1 | # This file is maintained automatically by "terraform init". 2 | # Manual edits may be lost in future updates. 3 | 4 | provider "registry.terraform.io/hashicorp/google" { 5 | } 6 | 7 | provider "registry.terraform.io/hashicorp/local" { 8 | } 9 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields/_dev/deploy/tf/data.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": "data file containing json" 3 | } 4 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields/_dev/deploy/tf/main.tf: -------------------------------------------------------------------------------- 1 | # A Terraform file 2 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields/_dev/deploy/tf/template.tftpl: -------------------------------------------------------------------------------- 1 | A Terraform template file 2 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields/data_stream/foo/_dev/deploy/docker/docker-compose.d/hi.sh: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | 3 | echo "Hello!" 4 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields/data_stream/foo/_dev/deploy/docker/docker-compose.yml: -------------------------------------------------------------------------------- 1 | version: '2.3' 2 | services: 3 | hello_world: -------------------------------------------------------------------------------- /test/packages/missing_required_fields/data_stream/foo/_dev/deploy/tf/.terraform.lock.hcl: -------------------------------------------------------------------------------- 1 | # This file is maintained automatically by "terraform init". 2 | # Manual edits may be lost in future updates. 3 | 4 | provider "registry.terraform.io/hashicorp/google" { 5 | } 6 | 7 | provider "registry.terraform.io/hashicorp/local" { 8 | } 9 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields/data_stream/foo/_dev/deploy/tf/data.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": "data file containing json" 3 | } 4 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields/data_stream/foo/_dev/deploy/tf/main.tf: -------------------------------------------------------------------------------- 1 | # A Terraform file 2 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields/data_stream/foo/_dev/deploy/tf/some-module.tf: -------------------------------------------------------------------------------- 1 | hello -------------------------------------------------------------------------------- /test/packages/missing_required_fields/data_stream/foo/_dev/deploy/tf/template.tftpl: -------------------------------------------------------------------------------- 1 | A Terraform template file 2 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields/data_stream/foo/_dev/test/pipeline/test-access-raw.log-config.yml: -------------------------------------------------------------------------------- 1 | fields: 2 | "@timestamp": "2020-04-28T11:07:58.223Z" 3 | ecs.version: "1.5.0" 4 | event.category: 5 | - web 6 | dynamic_fields: 7 | foobar: ".+" 8 | a_numeric_field: "\\d+" 9 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields/data_stream/foo/_dev/test/pipeline/test-common-config.yml: -------------------------------------------------------------------------------- 1 | multiline: 2 | first_line_pattern: "^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}" -------------------------------------------------------------------------------- /test/packages/missing_required_fields/data_stream/foo/_dev/test/system/test-default-config.yml: -------------------------------------------------------------------------------- 1 | wait_for_data_timeout: 10m 2 | vars: ~ -------------------------------------------------------------------------------- /test/packages/missing_required_fields/data_stream/foo/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for Microsoft DHCP 3 | 4 | processors: 5 | - set: 6 | field: foo 7 | value: bar 8 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields/data_stream/foo/fields/base-fields.yml: -------------------------------------------------------------------------------- 1 | - name: data_stream.dataset 2 | type: keyword 3 | description: Data stream dataset. 4 | - name: data_stream.namespace 5 | type: constant_keyword 6 | description: Data stream namespace. 7 | - name: '@timestamp' 8 | type: date 9 | description: Event timestamp. 10 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields/data_stream/foo/fields/external-fields.yml: -------------------------------------------------------------------------------- 1 | - name: event 2 | type: group 3 | description: Event family 4 | fields: 5 | - name: category 6 | external: ecs 7 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/missing_required_fields/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for ml model 3 | plugins. 4 | processors: 5 | - set: 6 | field: error.message 7 | value: '{{ _ingest.on_failure_message }}' 8 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields/img/kibana-system.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/missing_required_fields/img/kibana-system.png -------------------------------------------------------------------------------- /test/packages/missing_required_fields/img/metricbeat_system_dashboard.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/missing_required_fields/img/metricbeat_system_dashboard.png -------------------------------------------------------------------------------- /test/packages/missing_required_fields_input/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v8.7.0 -------------------------------------------------------------------------------- /test/packages/missing_required_fields_input/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields_input/fields/base-fields.yml: -------------------------------------------------------------------------------- 1 | - name: data_stream.dataset 2 | type: keyword 3 | description: Data stream dataset. 4 | - name: data_stream.namespace 5 | type: constant_keyword 6 | description: Data stream namespace. 7 | - name: '@timestamp' 8 | type: date 9 | description: Event timestamp. 10 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields_input/fields/external-fields.yml: -------------------------------------------------------------------------------- 1 | - name: event 2 | type: group 3 | description: Event family 4 | fields: 5 | - name: category 6 | external: ecs 7 | -------------------------------------------------------------------------------- /test/packages/missing_required_fields_input/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/missing_required_fields_input/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/missing_version/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/package-spec/pull/172 7 | -------------------------------------------------------------------------------- /test/packages/missing_version/docs/README.md: -------------------------------------------------------------------------------- 1 | # Missing Version 2 | 3 | This is a new integration created using the [elastic-package](https://github.com/elastic/elastic-package) tool. 4 | 5 | Consider using the README template file `_dev/build/docs/README.md`to generate a list of exported fields or include a sample event. -------------------------------------------------------------------------------- /test/packages/next_version_unreleased/docs/README.md: -------------------------------------------------------------------------------- 1 | # Next Version Unreleased 2 | 3 | This is a new integration created using the [elastic-package](https://github.com/elastic/elastic-package) tool. 4 | 5 | Consider using the README template file `_dev/build/docs/README.md`to generate a list of exported fields or include a sample event. -------------------------------------------------------------------------------- /test/packages/next_version_unreleased/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/next_version_unreleased/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/no_manifest/.keep: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/no_manifest/.keep -------------------------------------------------------------------------------- /test/packages/no_spec_version/manifest.yml: -------------------------------------------------------------------------------- 1 | # no format_version in this file 2 | name: mypackage 3 | type: integration 4 | version: 1.0.0 -------------------------------------------------------------------------------- /test/packages/profiling_symbolizer/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "0.0.1" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/integrations/pull/1 # FIXME Replace with the real PR link 7 | -------------------------------------------------------------------------------- /test/packages/profiling_symbolizer/data_stream/example/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/profiling_symbolizer/data_stream/example/elasticsearch/ingest_pipeline/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for processing sample logs 3 | processors: 4 | - set: 5 | field: sample_field 6 | value: "1" 7 | on_failure: 8 | - set: 9 | field: error.message 10 | value: '{{ _ingest.on_failure_message }}' -------------------------------------------------------------------------------- /test/packages/profiling_symbolizer/data_stream/example/manifest.yml: -------------------------------------------------------------------------------- 1 | title: "Universal Profiling Symbols" 2 | type: profiling 3 | release: beta 4 | streams: 5 | - input: pf-elastic-symbolizer 6 | title: Universal Profiling Symbols 7 | description: "Collect debug symbols for native binaries" 8 | enabled: true 9 | -------------------------------------------------------------------------------- /test/packages/profiling_symbolizer/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/profiling_symbolizer/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/same_version_twice/docs/README.md: -------------------------------------------------------------------------------- 1 | # Same Version Twice 2 | 3 | This is a new integration created using the [elastic-package](https://github.com/elastic/elastic-package) tool. 4 | 5 | Consider using the README template file `_dev/build/docs/README.md`to generate a list of exported fields or include a sample event. -------------------------------------------------------------------------------- /test/packages/same_version_twice/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/same_version_twice/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/skip_pipeline_rename_validation/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.0.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/package-spec/pull/690 7 | -------------------------------------------------------------------------------- /test/packages/skip_pipeline_rename_validation/data_stream/invalid_message_rename/agent/stream/stream.yml.hbs: -------------------------------------------------------------------------------- 1 | paths: 2 | {{#each paths as |path i|}} 3 | - {{path}} 4 | {{/each}} 5 | exclude_files: [".gz$"] 6 | processors: 7 | - add_locale: ~ 8 | -------------------------------------------------------------------------------- /test/packages/skip_pipeline_rename_validation/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/skip_pipeline_rename_validation/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/skip_pipeline_rename_validation/validation.yml: -------------------------------------------------------------------------------- 1 | errors: 2 | exclude_checks: 3 | - JSE00001 # Ingest pipeline validation for rename message processor. 4 | - PSR00001 # Allow to use unreleased features in GA package. 5 | 6 | -------------------------------------------------------------------------------- /test/packages/sql_input/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v1.9.2 -------------------------------------------------------------------------------- /test/packages/sql_input/_dev/build/docs/README.md: -------------------------------------------------------------------------------- 1 | This is a template for the package README. -------------------------------------------------------------------------------- /test/packages/sql_input/_dev/deploy/tf/.terraform.lock.hcl: -------------------------------------------------------------------------------- 1 | # This file is maintained automatically by "terraform init". 2 | # Manual edits may be lost in future updates. 3 | 4 | provider "registry.terraform.io/hashicorp/google" { 5 | } 6 | 7 | provider "registry.terraform.io/hashicorp/local" { 8 | } 9 | -------------------------------------------------------------------------------- /test/packages/sql_input/_dev/deploy/tf/data.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": "data file containing json" 3 | } 4 | -------------------------------------------------------------------------------- /test/packages/sql_input/_dev/deploy/tf/main.tf: -------------------------------------------------------------------------------- 1 | # A Terraform file 2 | -------------------------------------------------------------------------------- /test/packages/sql_input/_dev/deploy/tf/template.tftpl: -------------------------------------------------------------------------------- 1 | A Terraform template file 2 | -------------------------------------------------------------------------------- /test/packages/sql_input/_dev/test/system/test-default-config.yml: -------------------------------------------------------------------------------- 1 | wait_for_data_timeout: 10m 2 | vars: 3 | data_stream.dataset: sql_input.test 4 | -------------------------------------------------------------------------------- /test/packages/sql_input/agent/input/input.yml.hbs: -------------------------------------------------------------------------------- 1 | metricsets: ["query"] 2 | period: {{period}} 3 | hosts: 4 | {{#each hosts}} 5 | - {{this}} 6 | {{/each}} 7 | driver: {{driver}} 8 | sql_query: {{sql_query} 9 | sql_response_format: {{sql_response_format}} -------------------------------------------------------------------------------- /test/packages/sql_input/changelog.yml: -------------------------------------------------------------------------------- 1 | # newer versions go on top 2 | - version: "1.2.0" 3 | changes: 4 | - description: Initial draft of the package 5 | type: enhancement 6 | link: https://github.com/elastic/package-spec/pull/325 7 | -------------------------------------------------------------------------------- /test/packages/sql_input/docs/README.md: -------------------------------------------------------------------------------- 1 | # SQL Input -------------------------------------------------------------------------------- /test/packages/sql_input/fields/input.yml: -------------------------------------------------------------------------------- 1 | - name: input.name 2 | type: constant_keyword 3 | description: Sample field to be added. 4 | value: logs -------------------------------------------------------------------------------- /test/packages/sql_input/img/sample-screenshot.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/sql_input/img/sample-screenshot.png -------------------------------------------------------------------------------- /test/packages/sql_input/lifecycle.yml: -------------------------------------------------------------------------------- 1 | data_retention: "30d" 2 | -------------------------------------------------------------------------------- /test/packages/visualizations_by_reference/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.1.2 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/131 -------------------------------------------------------------------------------- /test/packages/visualizations_by_reference/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/visualizations_by_reference/kibana/visualization/visualizations_by_reference-5e1a01ff-6f9a-41c1-b7ad-326472db42b6.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "visualizations_by_reference-5e1a01ff-6f9a-41c1-b7ad-326472db42b6", 3 | "references": [], 4 | "type": "visualization" 5 | } 6 | -------------------------------------------------------------------------------- /test/packages/visualizations_by_reference/kibana/visualization/visualizations_by_reference-8287a5d5-1576-4f3a-83c4-444e9058439b.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "visualizations_by_reference-8287a5d5-1576-4f3a-83c4-444e9058439b", 3 | "references": [], 4 | "type": "visualization" 5 | } 6 | -------------------------------------------------------------------------------- /test/packages/with_links/NOTICE.txt: -------------------------------------------------------------------------------- 1 | Elastic package-spec 2 | Copyright 2021 Elasticsearch B.V. -------------------------------------------------------------------------------- /test/packages/with_links/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v1.9.2 -------------------------------------------------------------------------------- /test/packages/with_links/_dev/build/docs/README.md: -------------------------------------------------------------------------------- 1 | This is a template for the package README. -------------------------------------------------------------------------------- /test/packages/with_links/_dev/deploy/tf/.terraform.lock.hcl: -------------------------------------------------------------------------------- 1 | # This file is maintained automatically by "terraform init". 2 | # Manual edits may be lost in future updates. 3 | 4 | provider "registry.terraform.io/hashicorp/google" { 5 | } 6 | 7 | provider "registry.terraform.io/hashicorp/local" { 8 | } 9 | -------------------------------------------------------------------------------- /test/packages/with_links/_dev/deploy/tf/data.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": "data file containing json" 3 | } 4 | -------------------------------------------------------------------------------- /test/packages/with_links/_dev/deploy/tf/main.tf: -------------------------------------------------------------------------------- 1 | # A Terraform file 2 | -------------------------------------------------------------------------------- /test/packages/with_links/_dev/deploy/tf/template.tftpl: -------------------------------------------------------------------------------- 1 | A Terraform template file 2 | -------------------------------------------------------------------------------- /test/packages/with_links/_dev/shared/default.json: -------------------------------------------------------------------------------- 1 | { 2 | "description": "Pipeline for Microsoft DHCP", 3 | "processors": [ 4 | { 5 | "set": { 6 | "field": "foo", 7 | "value": "bar" 8 | } 9 | } 10 | ] 11 | } -------------------------------------------------------------------------------- /test/packages/with_links/_dev/shared/default.yml: -------------------------------------------------------------------------------- 1 | --- 2 | description: Pipeline for ml model 3 | plugins. 4 | processors: 5 | - set: 6 | field: error.message 7 | value: '{{ _ingest.on_failure_message }}' 8 | -------------------------------------------------------------------------------- /test/packages/with_links/_dev/shared/s3.yml.hbs: -------------------------------------------------------------------------------- 1 | # Handlebars template for agent -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/foo/_dev/benchmark/pipeline/config.yml: -------------------------------------------------------------------------------- 1 | num_docs: 10000 -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/foo/_dev/deploy/docker/docker-compose.d/hi.sh: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | 3 | echo "Hello!" 4 | -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/foo/_dev/deploy/docker/docker-compose.yml: -------------------------------------------------------------------------------- 1 | version: '2.3' 2 | services: 3 | hello_world: -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/foo/_dev/deploy/tf/.terraform.lock.hcl: -------------------------------------------------------------------------------- 1 | # This file is maintained automatically by "terraform init". 2 | # Manual edits may be lost in future updates. 3 | 4 | provider "registry.terraform.io/hashicorp/google" { 5 | } 6 | 7 | provider "registry.terraform.io/hashicorp/local" { 8 | } 9 | -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/foo/_dev/deploy/tf/data.json: -------------------------------------------------------------------------------- 1 | { 2 | "a": "data file containing json" 3 | } 4 | -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/foo/_dev/deploy/tf/main.tf: -------------------------------------------------------------------------------- 1 | # A Terraform file 2 | -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/foo/_dev/deploy/tf/some-module.tf: -------------------------------------------------------------------------------- 1 | hello -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/foo/_dev/deploy/tf/template.tftpl: -------------------------------------------------------------------------------- 1 | A Terraform template file 2 | -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/foo/_dev/test/pipeline/test-access-raw.log-config.yml: -------------------------------------------------------------------------------- 1 | fields: 2 | "@timestamp": "2020-04-28T11:07:58.223Z" 3 | ecs.version: "1.5.0" 4 | event.category: 5 | - web 6 | dynamic_fields: 7 | foobar: ".+" 8 | a_numeric_field: "\\d+" 9 | -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/foo/_dev/test/pipeline/test-common-config.yml: -------------------------------------------------------------------------------- 1 | multiline: 2 | first_line_pattern: "^(?:[0-9]{1,3}\\.){3}[0-9]{1,3}" -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/foo/_dev/test/system/test-default-config.yml: -------------------------------------------------------------------------------- 1 | wait_for_data_timeout: 10m 2 | skip_ignored_fields: 3 | - error.message 4 | vars: ~ -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/foo/agent/stream/s3.yml.hbs.link: -------------------------------------------------------------------------------- 1 | ../../../../_dev/shared/s3.yml.hbs 44fba1bf58b7598e6347a5bca6336d2d191d2c54c78eff0fe9502c8e86be390a -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/foo/elasticsearch/ingest_pipeline/default.json.link: -------------------------------------------------------------------------------- 1 | ../../../../_dev/shared/default.json e0ab6a91e1478bbbd7ceef0dc942a285bdef2bb3d78a4683dca80ea099a5ff59 -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/foo/fields/base-fields.yml: -------------------------------------------------------------------------------- 1 | - name: data_stream.type 2 | type: constant_keyword 3 | description: Data stream type. 4 | - name: data_stream.dataset 5 | type: constant_keyword 6 | description: Data stream dataset. 7 | - name: data_stream.namespace 8 | type: constant_keyword 9 | description: Data stream namespace. 10 | -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/foo/fields/external-fields.yml: -------------------------------------------------------------------------------- 1 | - name: "@timestamp" 2 | external: ecs 3 | - name: event 4 | type: group 5 | description: Event family 6 | fields: 7 | - name: category 8 | external: ecs 9 | -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/foo/fields/some-fields.yml.link: -------------------------------------------------------------------------------- 1 | ../../../_dev/shared/some_fields.yml 9fe744e9d6cbf9c6057a38327936b8b66e48a087479e781e9a344bb2502182a0 -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/hidden_data_stream/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Hidden data stream and ilm policy overrride 2 | type: metrics 3 | hidden: true 4 | elasticsearch: 5 | index_template.mappings: 6 | dynamic: false 7 | -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/ilm_policy/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Hidden data stream and ilm policy overrride 2 | type: metrics 3 | ilm_policy: metrics-good.ilm_policy-diagnostics 4 | elasticsearch: 5 | index_template.mappings: 6 | dynamic: false 7 | -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/k8s_data_stream_no_definitions/_dev/deploy/k8s/.empty: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/with_links/data_stream/k8s_data_stream_no_definitions/_dev/deploy/k8s/.empty -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/skipped_tests/_dev/test/static/test-default-config.yml: -------------------------------------------------------------------------------- 1 | skip: 2 | reason: Test was skipped to test skipped test feature in spec. 3 | link: https://github.com/elastic/integrations/issues/0 -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/skipped_tests/_dev/test/system/test-default-config.yml: -------------------------------------------------------------------------------- 1 | skip: 2 | reason: Test was skipped to test skipped test feature in spec. 3 | link: https://github.com/elastic/integrations/issues/520 4 | input: foo 5 | vars: ~ 6 | data_stream: 7 | vars: 8 | paths: 9 | - "{{SERVICE_LOGS_DIR}}/access.log" 10 | -------------------------------------------------------------------------------- /test/packages/with_links/data_stream/skipped_tests/manifest.yml: -------------------------------------------------------------------------------- 1 | title: Package with skipped tests 2 | type: metrics 3 | -------------------------------------------------------------------------------- /test/packages/with_links/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/with_links/elasticsearch/ingest_pipeline/default.yml.link: -------------------------------------------------------------------------------- 1 | ../../_dev/shared/default.yml 5cd4673985b327ccb7a424d2941d802da8345bf66f8f78f8ad1cc0d275f71c85 -------------------------------------------------------------------------------- /test/packages/with_links/elasticsearch/transform/good_example_bdc_2/manifest.yml: -------------------------------------------------------------------------------- 1 | start: false -------------------------------------------------------------------------------- /test/packages/with_links/img/kibana-system.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/with_links/img/kibana-system.png -------------------------------------------------------------------------------- /test/packages/with_links/img/metricbeat_system_dashboard.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/elastic/package-spec/688f12bb80293cd065a080107188084f33d3e025/test/packages/with_links/img/metricbeat_system_dashboard.png -------------------------------------------------------------------------------- /test/packages/with_links/kibana/dashboard/with_links-dashboard-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "with_links-dashboard-abc-1", 3 | "type": "dashboard" 4 | } -------------------------------------------------------------------------------- /test/packages/with_links/kibana/lens/with_links-lens-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "with_links-lens-abc-1", 3 | "type": "lens" 4 | } -------------------------------------------------------------------------------- /test/packages/with_links/kibana/map/with_links-map-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "with_links-map-abc-1", 3 | "type": "map" 4 | } -------------------------------------------------------------------------------- /test/packages/with_links/kibana/search/with_links-search-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "with_links-search-abc-1", 3 | "type": "search" 4 | } -------------------------------------------------------------------------------- /test/packages/with_links/kibana/tag/with_links-tag-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "attributes": { 3 | "color": "#e20b7f", 4 | "description": "", 5 | "name": "abc" 6 | }, 7 | "coreMigrationVersion": "7.15.0", 8 | "id": "with_links-tag-abc-1", 9 | "references": [], 10 | "type": "tag" 11 | } -------------------------------------------------------------------------------- /test/packages/with_links/kibana/visualization/with_links-visualization-abc-1.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "with_links-visualization-abc-1", 3 | "type": "visualization" 4 | } -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/_dev/build/build.yml: -------------------------------------------------------------------------------- 1 | dependencies: 2 | ecs: 3 | reference: git@v8.7.0 4 | -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/changelog.yml: -------------------------------------------------------------------------------- 1 | - version: 0.1.2 2 | changes: 3 | - description: initial release 4 | type: enhancement 5 | link: https://github.com/elastic/package-spec/pull/131 -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/data_stream/foo/fields/base_fields.yml: -------------------------------------------------------------------------------- 1 | - name: data_stream.dataset 2 | external: ecs 3 | - name: data_stream.namespace 4 | external: ecs 5 | - name: data_stream.type 6 | external: ecs 7 | - name: "@timestamp" 8 | external: ecs 9 | -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/data_stream/foo/fields/some_fields.yml: -------------------------------------------------------------------------------- 1 | - name: foo 2 | type: text -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/data_stream/foo/manifest.yml: -------------------------------------------------------------------------------- 1 | title: foo 2 | type: logs 3 | release: experimental -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/docs/README.md: -------------------------------------------------------------------------------- 1 | Main -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/kibana/dashboard/b7e55b73-97cc-44fd-8555-d01b7e13e70d.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "b7e55b73-97cc-44fd-8555-d01b7e13e70d", 3 | "type": "dashboard" 4 | } -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/kibana/dashboard/bad-Foobaz-ECS.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "bad-Foobaz-ECS", 3 | "type": "dashboard" 4 | } -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/kibana/dashboard/bad-ecs.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "bad-ecs", 3 | "type": "dashboard" 4 | } -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/kibana/dashboard/bad-foobar-ecs.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "bad-foobar-ecs", 3 | "type": "dashboard" 4 | } -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/kibana/map/06149856-cbc1-4988-a93a-815915c4408e.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "06149856-cbc1-4988-a93a-815915c4408e", 3 | "type": "map" 4 | } -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/kibana/map/another-package-map.json: -------------------------------------------------------------------------------- 1 | { 2 | "attributes": { 3 | "description": "Unexpected Kibana map dedicated for a different package." 4 | }, 5 | "id": "another-package-map", 6 | "type": "map" 7 | } -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/kibana/map/bad-map.json: -------------------------------------------------------------------------------- 1 | { 2 | "attributes": { 3 | "description": "Expected Kibana map." 4 | }, 5 | "id": "bad-map", 6 | "type": "map" 7 | } -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/kibana/search/691240b5-7ec9-4fd7-8750-4ef97944f960.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "691240b5-7ec9-4fd7-8750-4ef97944f960", 3 | "type": "search" 4 | } -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/kibana/search/another-package-search.json: -------------------------------------------------------------------------------- 1 | { 2 | "attributes": { 3 | "description": "Unexpected Kibana search dedicated for a different package." 4 | }, 5 | "id": "another-package-search", 6 | "type": "search" 7 | } -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/kibana/search/bad-search.json: -------------------------------------------------------------------------------- 1 | { 2 | "attributes": { 3 | "description": "Expected Kibana search." 4 | }, 5 | "id": "bad-search", 6 | "type": "search" 7 | } -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/kibana/visualization/another-package-visualization.json: -------------------------------------------------------------------------------- 1 | { 2 | "attributes": { 3 | "description": "Unexpected Kibana visualization dedicated for a different package." 4 | }, 5 | "id": "another-package-visualization", 6 | "type": "visualization" 7 | } -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/kibana/visualization/bad-visualization.json: -------------------------------------------------------------------------------- 1 | { 2 | "attributes": { 3 | "description": "Expected Kibana visualization." 4 | }, 5 | "id": "bad-visualization", 6 | "type": "visualization" 7 | } -------------------------------------------------------------------------------- /test/packages/wrong_kibana_filename/kibana/visualization/defa1bcc-1ab6-4069-adec-8c997b069a5e.json: -------------------------------------------------------------------------------- 1 | { 2 | "id": "defa1bcc-1ab6-4069-adec-8c997b069a5e", 3 | "type": "visualization" 4 | } -------------------------------------------------------------------------------- /versions/1/README.md: -------------------------------------------------------------------------------- 1 | This directory doesn't contain the spec anymore, please refer to [../../spec](../../spec). 2 | --------------------------------------------------------------------------------