Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Auditbeat] Fix hostname references in System module dashboards #11064

Merged
merged 3 commits into from
Mar 4, 2019

Conversation

cwurm
Copy link
Contributor

@cwurm cwurm commented Mar 4, 2019

In 6.7, the add_host_metadata processor still uses host.name. In 7.0 this changes to host.hostname. And unfortunately, while a field alias is defined Kibana does not honor those in the saved searches we are using in the System module dashboards. So this changes to using host.name for 6.7.

@elasticmachine
Copy link
Collaborator

Pinging @elastic/secops

@cwurm cwurm requested a review from a team March 4, 2019 15:50
Copy link
Contributor

@webmat webmat left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good find!

How far did you grep? Any other Beats dashboards doing this?

@cwurm cwurm merged commit d9002f0 into elastic:6.7 Mar 4, 2019
@cwurm
Copy link
Contributor Author

cwurm commented Mar 5, 2019

How far did you grep? Any other Beats dashboards doing this?

I didn't see any in 6.7. But there seem to be a number using host.name in 7.0+ which I doubt will work. I'll check that next.

@cwurm cwurm deleted the dashboard_host_name_6.7 branch March 5, 2019 12:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants