diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 05529884e70..be60f3b93ac 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -69,7 +69,6 @@ /packages/elasticsearch @elastic/infra-monitoring-ui /packages/etcd @elastic/obs-service-integrations /packages/f5 @elastic/security-external-integrations -/packages/filestream @elastic/elastic-agent-data-plane /packages/fim @elastic/security-external-integrations /packages/fireeye @elastic/security-external-integrations /packages/fleet_server @elastic/elastic-agent-control-plane diff --git a/packages/filestream/_dev/build/build.yml b/packages/filestream/_dev/build/build.yml deleted file mode 100644 index 57064cc41b0..00000000000 --- a/packages/filestream/_dev/build/build.yml +++ /dev/null @@ -1,3 +0,0 @@ -dependencies: - ecs: - reference: git@v8.2.0 diff --git a/packages/filestream/_dev/build/docs/README.md b/packages/filestream/_dev/build/docs/README.md deleted file mode 100644 index 71baa476cd2..00000000000 --- a/packages/filestream/_dev/build/docs/README.md +++ /dev/null @@ -1,29 +0,0 @@ -# Custom Filestream Log integration - -The `filestream` custom input is used to read lines from active log files. It is the -new, improved alternative to the `log` input. It comes with various improvements -to the existing input: - -1. Checking of `close_*` options happens out of band. Thus, if an output is blocked, -Elastic Agent can close the reader and avoid keeping too many files open. - -2. Detailed metrics are available for all files that match the `paths` configuration -regardless of the `harvester_limit`. This way, you can keep track of all files, -even ones that are not actively read. - -3. The order of `parsers` is configurable. So it is possible to parse JSON lines and then -aggregate the contents into a multiline event. - -4. Some position updates and metadata changes no longer depend on the publishing pipeline. -If the pipeline is blocked some changes are still applied to the registry. - -5. Only the most recent updates are serialized to the registry. In contrast, the `log` input -has to serialize the complete registry on each ACK from the outputs. This makes the registry updates -much quicker with this input. - -6. The input ensures that only offsets updates are written to the registry append only log. -The `log` writes the complete file state. - -7. Stale entries can be removed from the registry, even if there is no active input. - -More information can be found on the {{ url "filebeat-input-filestream" "Filestream documentation page" }} diff --git a/packages/filestream/_dev/deploy/docker/docker-compose.yml b/packages/filestream/_dev/deploy/docker/docker-compose.yml deleted file mode 100644 index e2788c97a30..00000000000 --- a/packages/filestream/_dev/deploy/docker/docker-compose.yml +++ /dev/null @@ -1,8 +0,0 @@ -version: '2.3' -services: - filestream-logfile: - image: alpine - volumes: - - ./sample_logs:/sample_logs:ro - - ${SERVICE_LOGS_DIR}:/var/log - command: /bin/sh -c "cp /sample_logs/* /var/log/" diff --git a/packages/filestream/_dev/deploy/docker/sample_logs/test-filestream.log b/packages/filestream/_dev/deploy/docker/sample_logs/test-filestream.log deleted file mode 100644 index 4d1575eb5e2..00000000000 --- a/packages/filestream/_dev/deploy/docker/sample_logs/test-filestream.log +++ /dev/null @@ -1 +0,0 @@ -<188>date=2020-04-23 time=12:17:48 devname="testswitch1" devid="somerouterid" logid="0316013056" type="utm" subtype="webfilter" eventtype="ftgd_blk" level="warning" vd="root" eventtime=1587230269052907555 tz="-0500" policyid=100602 sessionid=1234 user="elasticuser" group="elasticgroup" authserver="elasticauth" srcip=192.168.2.1 srcport=61930 srcintf="port1" srcintfrole="lan" dstip=67.43.156.13 dstport=443 dstintf="wan1" dstintfrole="wan" proto=6 service="HTTPS" hostname="elastic.co" profile="elasticruleset" action="blocked" reqtype="direct" url="/config/" sentbyte=1152 rcvdbyte=1130 direction="outgoing" msg="URL belongs to a denied category in policy" method="domain" cat=76 catdesc="Internet Telephony" diff --git a/packages/filestream/changelog.yml b/packages/filestream/changelog.yml deleted file mode 100644 index e0d394dc679..00000000000 --- a/packages/filestream/changelog.yml +++ /dev/null @@ -1,5 +0,0 @@ -- version: "1.0.0" - changes: - - description: Initial Release - type: enhancement - link: https://github.com/elastic/integrations/pull/2724 diff --git a/packages/filestream/data_stream/generic/_dev/test/system/test-filestream-config.yml b/packages/filestream/data_stream/generic/_dev/test/system/test-filestream-config.yml deleted file mode 100644 index 4d6ebe3dd05..00000000000 --- a/packages/filestream/data_stream/generic/_dev/test/system/test-filestream-config.yml +++ /dev/null @@ -1,6 +0,0 @@ -service: filestream-logfile -input: filestream -data_stream: - vars: - paths: - - "{{SERVICE_LOGS_DIR}}/test-filestream.log" diff --git a/packages/filestream/data_stream/generic/agent/stream/filestream.yml.hbs b/packages/filestream/data_stream/generic/agent/stream/filestream.yml.hbs deleted file mode 100644 index 5f3f9adbbc0..00000000000 --- a/packages/filestream/data_stream/generic/agent/stream/filestream.yml.hbs +++ /dev/null @@ -1,116 +0,0 @@ -data_stream: - dataset: {{data_stream.dataset}} -paths: -{{#each paths as |path i|}} - - {{path}} -{{/each}} -{{#if pipeline}} -pipeline: {{pipeline}} -{{/if}} -{{#if recursive_glob}} -prospector.scanner.recursive_glob: {{recursive_glob}} -{{/if}} -{{#if exclude_files}} -prospector.scanner.exclude_files: -{{#each exclude_files as |exclude_file i|}} - - {{exclude_file}} -{{/each}} -{{/if}} -{{#if include_files}} -prospector.scanner.include_files: -{{#each include_files as |include_file i|}} - - {{include_file}} -{{/each}} -{{/if}} -{{#if symlinks}} -prospector.scanner.symlinks: {{symlinks}} -{{/if}} -{{#if resend_on_touch}} -prospector.scanner.resend_on_touch: {{resend_on_touch}} -{{/if}} -{{#if check_interval}} -prospector.scanner.check_interval: {{check_interval}} -{{/if}} -{{#if ignore_older}} -ignore_older: {{ignore_older}} -{{/if}} -{{#if ignore_inactive}} -ignore_inactive: {{ignore_inactive}} -{{/if}} -{{#if close_on_state_changed_inactive}} -close.on_state_change.inactive: {{close_on_state_changed_inactive}} -{{/if}} -{{#if close_on_state_changed_renamed}} -close.on_state_change.renamed: {{close_on_state_changed_renamed}} -{{/if}} -{{#if close_on_state_changed_removed}} -close.on_state_change.removed: {{close_on_state_changed_removed}} -{{/if}} -{{#if close_reader_eof}} -close.reader.on_eof: {{close_reader_eof}} -{{/if}} -{{#if close_reader_after_interval}} -close.reader.after_interval: {{close_reader_after_interval}} -{{/if}} -{{#if clean_inactive}} -clean_inactive: {{clean_inactive}} -{{/if}} -{{#if clean_removed}} -clean_removed: {{clean_removed}} -{{/if}} -{{#if backoff_init}} -backoff.init: {{backoff_init}} -{{/if}} -{{#if backoff_max}} -backoff.max: {{backoff_max}} -{{/if}} -{{#if file_identity_native}} -file_identity.native: {{file_identity_native}} -{{/if}} -{{#if file_identity_path}} -file_identity.path: {{file_identity_path}} -{{/if}} -{{#if file_identity_inode_marker_path}} -file_identity.inode_marker.path: {{file_identity_inode_marker_path}} -{{/if}} -{{#if rotation_external_strategy_copytruncate}} -rotation.external.strategy.copytruncate: {{rotation_external_strategy_copytruncate}} -{{/if}} -{{#if encoding}} -encoding: {{encoding}} -{{/if}} -{{#if exclude_lines}} -exclude_lines: -{{#each exclude_lines as |exclude_line i|}} - - {{exclude_line}} -{{/each}} -{{/if}} -{{#if include_lines}} -include_lines: -{{#each include_lines as |include_line i|}} - - {{include_line}} -{{/each}} -{{/if}} -{{#if buffer_size}} -buffer_size: {{buffer_size}} -{{/if}} -{{#if message_max_bytes}} -message_max_bytes: {{message_max_bytes}} -{{/if}} -{{#if parsers}} -parsers: -{{parsers}} -{{/if}} -{{#if tags}} -tags: -{{#each tags as |tag i|}} - - {{tag}} -{{/each}} -{{/if}} -{{#contains "forwarded" tags}} -publisher_pipeline.disable_host: true -{{/contains}} -{{#if processors}} -processors: -{{processors}} -{{/if}} \ No newline at end of file diff --git a/packages/filestream/data_stream/generic/fields/base-fields.yml b/packages/filestream/data_stream/generic/fields/base-fields.yml deleted file mode 100644 index 97cf5aa8438..00000000000 --- a/packages/filestream/data_stream/generic/fields/base-fields.yml +++ /dev/null @@ -1,20 +0,0 @@ -- name: data_stream.type - type: constant_keyword - description: Data stream type. -- name: data_stream.dataset - type: constant_keyword - description: Data stream dataset. -- name: data_stream.namespace - type: constant_keyword - description: Data stream namespace. -- name: event.module - type: constant_keyword - description: Event module - value: filestream -- name: event.dataset - type: constant_keyword - description: Event dataset - value: filestream.generic -- name: "@timestamp" - type: date - description: Event timestamp. diff --git a/packages/filestream/data_stream/generic/fields/beats.yml b/packages/filestream/data_stream/generic/fields/beats.yml deleted file mode 100644 index ede69588554..00000000000 --- a/packages/filestream/data_stream/generic/fields/beats.yml +++ /dev/null @@ -1,6 +0,0 @@ -- name: input.type - description: Type of Filebeat input. - type: keyword -- name: tags - type: keyword - description: User defined tags diff --git a/packages/filestream/data_stream/generic/fields/ecs.yml b/packages/filestream/data_stream/generic/fields/ecs.yml deleted file mode 100644 index 10f307537ab..00000000000 --- a/packages/filestream/data_stream/generic/fields/ecs.yml +++ /dev/null @@ -1,12 +0,0 @@ -- name: ecs.version - external: ecs -- name: log.file.path - external: ecs -- name: log.offset - description: Current log offset -- name: log.level - external: ecs -- name: message - external: ecs -- name: event.original - external: ecs diff --git a/packages/filestream/data_stream/generic/manifest.yml b/packages/filestream/data_stream/generic/manifest.yml deleted file mode 100644 index 1bb035c92cc..00000000000 --- a/packages/filestream/data_stream/generic/manifest.yml +++ /dev/null @@ -1,263 +0,0 @@ -title: Custom Filestream Logs -type: logs -streams: - - input: filestream - description: Collect log data from filestream with Elastic Agent. - title: Custom Filestream Logs - template_path: filestream.yml.hbs - vars: - - name: paths - type: text - title: Paths - multi: true - required: true - show_user: true - default: - - /var/log/*.log - - name: data_stream.dataset - type: text - title: Dataset name - description: | - Dataset to write data to. Changing the dataset will send the data to a different index. You can't use `-` in the name of a dataset and only valid characters for [Elasticsearch index names](https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-index_.html). - default: filestream.generic - required: true - show_user: true - - name: pipeline - type: text - title: Ingest Pipeline - description: | - The Ingest Node pipeline ID to be used by the integration. - required: false - show_user: true - - name: parsers - type: yaml - title: Parsers - description: | - This option expects a list of parsers that the log line has to go through. For more information see [Parsers](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-filestream.html#_parsers) - required: false - show_user: true - multi: false - default: | - #- ndjson: - # target: "" - # message_key: msg - #- multiline: - # type: counter - # lines_count: 3 - - name: exclude_files - type: text - title: Exclude Files - description: | - A list of regular expressions to match the files that you want Elastic Agent to ignore. By default no files are excluded. - required: false - show_user: true - multi: true - default: - - '\.gz$' - - name: include_files - type: text - title: Include Files - description: | - A list of regular expressions to match the files that you want Elastic Agent to include. If a list of regexes is provided, only the files that are allowed by the patterns are harvested. - required: false - show_user: true - multi: true - - name: processors - type: yaml - title: Processors - multi: false - required: false - show_user: false - description: | - Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details. - - name: tags - type: text - title: Tags - description: Tags to include in the published event - required: false - multi: true - show_user: true - - name: encoding - type: text - title: Encoding - description: | - The file encoding to use for reading data that contains international characters. For a full list of valid encodings, see the [Documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-filestream.html#_encoding_2) - required: false - show_user: false - - name: recursive_glob - type: bool - title: Recursive Glob - description: | - Enable expanding ** into recursive glob patterns. With this feature enabled, the rightmost ** in each path is expanded into a fixed number of glob patterns. For example: /foo/** expands to /foo, /foo/*, /foo/*/*, and so on. If enabled it expands a single ** into a 8-level deep * pattern. - This feature is enabled by default. Set prospector.scanner.recursive_glob to false to disable it. - required: false - show_user: false - default: true - - name: symlinks - type: bool - title: Enable symlinks - description: | - The symlinks option allows Elastic Agent to harvest symlinks in addition to regular files. When harvesting symlinks, Elastic Agent opens and reads the original file even though it reports the path of the symlink. - ** Because this option may lead to data loss, it is disabled by default. ** - required: false - show_user: false - - name: resend_on_touch - type: bool - title: Resend on touch - description: | - If this option is enabled a file is resent if its size has not changed but its modification time has changed to a later time than before. It is disabled by default to avoid accidentally resending files. - required: false - show_user: false - - name: check_interval - type: text - title: Check Interval - description: | - How often Elastic Agent checks for new files in the paths that are specified for harvesting. For example Specify 1s to scan the directory as frequently as possible without causing Elastic Agent to scan too frequently. ** We do not recommend to set this value <1s. ** - required: false - show_user: false - - name: ignore_older - type: text - title: Ignore Older - description: | - If this option is enabled, Elastic Agent ignores any files that were modified before the specified timespan. You can use time strings like 2h (2 hours) and 5m (5 minutes). The default is 0, which disables the setting. - You must set Ignore Older to be greater than On State Change Inactive. - For more information, please see the [Documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-filestream.html#filebeat-input-filestream-ignore-older) - required: false - show_user: false - - name: ignore_inactive - type: text - title: Ignore Inactive - description: | - If this option is enabled, Elastic Agent ignores every file that has not been updated since the selected time. Possible options are since_first_start and since_last_start. - required: false - show_user: false - - name: close_on_state_changed_inactive - type: text - title: Close on State Changed Inactive - description: | - When this option is enabled, Elastic Agent closes the file handle if a file has not been harvested for the specified duration. The counter for the defined period starts when the last log line was read by the harvester. It is not based on the modification time of the file. If the closed file changes again, a new harvester is started and the latest changes will be picked up after Check Interval has elapsed. - required: false - show_user: false - - name: close_on_state_changed_renamed - type: bool - title: Close on State Changed Renamed - description: | - ** Only use this option if you understand that data loss is a potential side effect. ** - When this option is enabled, Elastic Agent closes the file handler when a file is renamed. This happens, for example, when rotating files. By default, the harvester stays open and keeps reading the file because the file handler does not depend on the file name. - required: false - show_user: false - - name: close_on_state_changed_removed - type: bool - title: Close on State Changed Removed - description: | - When this option is enabled, Elastic Agent closes the harvester when a file is removed. Normally a file should only be removed after it’s inactive for the duration specified by close.on_state_change.inactive. - required: false - show_user: false - - name: close_reader_eof - type: bool - title: Close Reader EOF - description: | - ** Only use this option if you understand that data loss is a potential side effect. ** - When this option is enabled, Elastic Agent closes a file as soon as the end of a file is reached. This is useful when your files are only written once and not updated from time to time. For example, this happens when you are writing every single log event to a new file. This option is disabled by default. - required: false - show_user: false - - name: close_reader_after_interval - type: text - title: Close Reader After Interval - description: | - ** Only use this option if you understand that data loss is a potential side effect. Another side effect is that multiline events might not be completely sent before the timeout expires. ** - This option is particularly useful in case the output is blocked, which makes Elastic Agent keep open file handlers even for files that were deleted from the disk. - For more information see the [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-filestream.html#filebeat-input-filestream-close-timeout). - required: false - show_user: false - - name: clean_inactive - type: text - title: Clean Inactive - description: | - ** Only use this option if you understand that data loss is a potential side effect. ** - When this option is enabled, Elastic Agent removes the state of a file after the specified period of inactivity has elapsed. - required: false - show_user: false - - name: clean_removed - type: bool - title: Clean Removed - description: | - When this option is enabled, Elastic Agent cleans files from the registry if they cannot be found on disk anymore under the last known name. - ** You must disable this option if you also disable Close Removed. ** - required: false - show_user: false - - name: backoff_init - type: text - title: Backoff Init - description: | - The backoff option defines how long Elastic Agent waits before checking a file again after EOF is reached. The default is 1s. - required: false - show_user: false - - name: backoff_max - type: text - title: Backoff Max - description: | - The maximum time for Elastic Agent to wait before checking a file again after EOF is reached. The default is 10s. - ** Requirement: Set Backoff Max to be greater than or equal to Backoff Init and less than or equal to Check Interval (Backoff Init <= Backoff Max <= Check Interval). ** - required: false - show_user: false - - name: file_identity_native - type: text - title: File Identity Native - description: | - ** Changing file_identity methods between runs may result in duplicated events in the output. ** - The default behaviour of Elastic Agent is to differentiate between files using their inodes and device ids. - required: false - show_user: false - - name: file_identity_path - type: text - title: File Identity Path - description: | - ** Changing file_identity methods between runs may result in duplicated events in the output. Only use this strategy if your log files are rotated to a folder outside of the scope of your input or not at all. Otherwise you end up with duplicated events. ** - To identify files based on their paths use this strategy. - required: false - show_user: false - - name: file_identity_inode_marker_path - type: text - title: File Identity Inode Marker Path - description: | - If the device id changes from time to time, you must use this method to distinguish files. This option is not supported on Windows. - required: false - show_user: false - - name: rotation_external_strategy_copytruncate - type: yaml - title: Rotation Strategy - description: "If the log rotating application copies the contents of the active file and then truncates the original file, use these options to help Elastic Agent to read files correctly.\nSet the option suffix_regex so Elastic Agent can tell active and rotated files apart. \nThere are two supported suffix types in the input: numberic and date.\n" - required: false - multi: false - show_user: false - - name: exclude_lines - type: text - title: Exclude Lines - description: | - A list of regular expressions to match the lines that you want Elastic Agent to exclude. Elastic Agent drops any lines that match a regular expression in the list. By default, no lines are dropped. Empty lines are ignored. - required: false - show_user: false - multi: true - - name: include_lines - type: text - title: Include Lines - description: | - A list of regular expressions to match the lines that you want Elastic Agent to include. Elastic Agent exports only the lines that match a regular expression in the list. By default, all lines are exported. Empty lines are ignored. - required: false - show_user: false - multi: true - - name: buffer_size - type: text - title: Buffer Size - description: | - The size in bytes of the buffer that each harvester uses when fetching a file. The default is 16384. - required: false - show_user: false - - name: message_max_bytes - type: text - title: Message Max Bytes - description: | - The maximum number of bytes that a single log message can have. All bytes after mesage_max_bytes are discarded and not sent. The default is 10MB (10485760). - required: false - show_user: false diff --git a/packages/filestream/data_stream/generic/sample_event.json b/packages/filestream/data_stream/generic/sample_event.json deleted file mode 100644 index ccbb9c7eef2..00000000000 --- a/packages/filestream/data_stream/generic/sample_event.json +++ /dev/null @@ -1,59 +0,0 @@ -{ - "@timestamp": "2022-02-23T11:30:36.750Z", - "agent": { - "ephemeral_id": "b11df30b-93f9-4e4e-a1b4-1825876ba276", - "id": "76f5c8be-13bd-498b-9caf-2995dd53195b", - "name": "docker-fleet-agent", - "type": "filebeat", - "version": "8.0.0" - }, - "data_stream": { - "dataset": "filestream.generic", - "namespace": "ep", - "type": "logs" - }, - "ecs": { - "version": "8.0.0" - }, - "elastic_agent": { - "id": "76f5c8be-13bd-498b-9caf-2995dd53195b", - "snapshot": false, - "version": "8.0.0" - }, - "event": { - "agent_id_status": "verified", - "dataset": "filestream.generic", - "ingested": "2022-02-23T11:30:37Z" - }, - "host": { - "architecture": "x86_64", - "containerized": true, - "hostname": "docker-fleet-agent", - "ip": [ - "192.168.0.7" - ], - "mac": [ - "02:42:c0:a8:00:07" - ], - "name": "docker-fleet-agent", - "os": { - "codename": "focal", - "family": "debian", - "kernel": "5.10.60.1-microsoft-standard-WSL2", - "name": "Ubuntu", - "platform": "ubuntu", - "type": "linux", - "version": "20.04.3 LTS (Focal Fossa)" - } - }, - "input": { - "type": "filestream" - }, - "log": { - "file": { - "path": "/tmp/service_logs/test-filestream.log" - }, - "offset": 712 - }, - "message": "\u003c188\u003edate=2020-04-23 time=12:17:48 devname=\"testswitch1\" devid=\"somerouterid\" logid=\"0316013056\" type=\"utm\" subtype=\"webfilter\" eventtype=\"ftgd_blk\" level=\"warning\" vd=\"root\" eventtime=1587230269052907555 tz=\"-0500\" policyid=100602 sessionid=1234 user=\"elasticuser\" group=\"elasticgroup\" authserver=\"elasticauth\" srcip=192.168.2.1 srcport=61930 srcintf=\"port1\" srcintfrole=\"lan\" dstip=67.43.156.13 dstport=443 dstintf=\"wan1\" dstintfrole=\"wan\" proto=6 service=\"HTTPS\" hostname=\"elastic.co\" profile=\"elasticruleset\" action=\"blocked\" reqtype=\"direct\" url=\"/config/\" sentbyte=1152 rcvdbyte=1130 direction=\"outgoing\" msg=\"URL belongs to a denied category in policy\" method=\"domain\" cat=76 catdesc=\"Internet Telephony\"" -} \ No newline at end of file diff --git a/packages/filestream/docs/README.md b/packages/filestream/docs/README.md deleted file mode 100644 index 5a41ed25648..00000000000 --- a/packages/filestream/docs/README.md +++ /dev/null @@ -1,29 +0,0 @@ -# Custom Filestream Log integration - -The `filestream` custom input is used to read lines from active log files. It is the -new, improved alternative to the `log` input. It comes with various improvements -to the existing input: - -1. Checking of `close_*` options happens out of band. Thus, if an output is blocked, -Elastic Agent can close the reader and avoid keeping too many files open. - -2. Detailed metrics are available for all files that match the `paths` configuration -regardless of the `harvester_limit`. This way, you can keep track of all files, -even ones that are not actively read. - -3. The order of `parsers` is configurable. So it is possible to parse JSON lines and then -aggregate the contents into a multiline event. - -4. Some position updates and metadata changes no longer depend on the publishing pipeline. -If the pipeline is blocked some changes are still applied to the registry. - -5. Only the most recent updates are serialized to the registry. In contrast, the `log` input -has to serialize the complete registry on each ACK from the outputs. This makes the registry updates -much quicker with this input. - -6. The input ensures that only offsets updates are written to the registry append only log. -The `log` writes the complete file state. - -7. Stale entries can be removed from the registry, even if there is no active input. - -More information can be found on the [Filestream documentation page](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-filestream.html) diff --git a/packages/filestream/img/icon.svg b/packages/filestream/img/icon.svg deleted file mode 100644 index 173fdec5072..00000000000 --- a/packages/filestream/img/icon.svg +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/packages/filestream/manifest.yml b/packages/filestream/manifest.yml deleted file mode 100644 index 1a2bc6b27a8..00000000000 --- a/packages/filestream/manifest.yml +++ /dev/null @@ -1,25 +0,0 @@ -format_version: 1.0.0 -name: filestream -title: Custom Filestream Logs -description: Collect log data from filestream with Elastic Agent. -type: integration -version: 1.0.0 -release: ga -conditions: - kibana.version: "^7.16.0 || ^8.0.0" -license: basic -categories: - - custom -policy_templates: - - name: filestream - title: Custom Filestream Logs - description: Collect log data from filestream with Elastic Agent. - inputs: - - type: filestream - title: Custom Filestream Logs - description: Collect log data from filestream with Elastic Agent. -icons: - - src: "/img/icon.svg" - type: "image/svg+xml" -owner: - github: elastic/elastic-agent-data-plane