From ebd0e26b0f02935fb4c243621fabda356d6b8a96 Mon Sep 17 00:00:00 2001 From: Maurizio Branca Date: Wed, 10 Dec 2025 20:28:37 +0100 Subject: [PATCH 1/2] Fix conditionals in fields rename --- .../elasticsearch/ingest_pipeline/default.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/packages/kubernetes/data_stream/audit_logs/elasticsearch/ingest_pipeline/default.yml b/packages/kubernetes/data_stream/audit_logs/elasticsearch/ingest_pipeline/default.yml index 78af39617a5..2e6f4191672 100644 --- a/packages/kubernetes/data_stream/audit_logs/elasticsearch/ingest_pipeline/default.yml +++ b/packages/kubernetes/data_stream/audit_logs/elasticsearch/ingest_pipeline/default.yml @@ -101,31 +101,31 @@ processors: field: kubernetes.audit.insertId target_field: kubernetes.audit.auditID ignore_missing: true - if: ctx.audit?.auditID == null + if: ctx.kubernetes?.audit?.auditID == null tag: rename_audit_id - rename: field: kubernetes.audit.receiveTimestamp target_field: kubernetes.audit.requestReceivedTimestamp ignore_missing: true - if: ctx.audit?.requestReceivedTimestamp == null + if: ctx.kubernetes?.audit?.requestReceivedTimestamp == null tag: rename_requestReceivedTimestamp - rename: field: kubernetes.audit.timestamp target_field: kubernetes.audit.stageTimestamp ignore_missing: true - if: ctx.audit?.stageTimestamp == null + if: ctx.kubernetes?.audit?.stageTimestamp == null tag: rename_stageTimestamp - rename: field: kubernetes.audit.protoPayload.status.code target_field: kubernetes.audit.responseStatus.code ignore_missing: true - if: ctx.audit?.responseStatus?.code == null + if: ctx.kubernetes?.audit?.responseStatus?.code == null tag: rename_responseStatusCode - rename: field: kubernetes.audit.labels target_field: kubernetes.audit.annotations ignore_missing: true - if: ctx.audit?.annotations == null + if: ctx.kubernetes?.audit?.annotations == null tag: rename_labels - script: lang: painless From 95eb27f7754ba47d535eb55fae9bd08c0970d72e Mon Sep 17 00:00:00 2001 From: Maurizio Branca Date: Thu, 11 Dec 2025 10:08:36 +0100 Subject: [PATCH 2/2] Update change log --- packages/kubernetes/changelog.yml | 5 +++++ packages/kubernetes/manifest.yml | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/packages/kubernetes/changelog.yml b/packages/kubernetes/changelog.yml index b2feb5cce13..3586da9ce43 100644 --- a/packages/kubernetes/changelog.yml +++ b/packages/kubernetes/changelog.yml @@ -1,4 +1,9 @@ # newer versions go on top +- version: "1.82.1" + changes: + - description: Fix field rename error in audit logs ingest pipeline. + type: bugfix + link: https://github.com/elastic/integrations/pull/16497 - version: "1.82.0" changes: - description: Allow to configure container_logs input id and update container logs documentation to include how to ingest rotated log files. diff --git a/packages/kubernetes/manifest.yml b/packages/kubernetes/manifest.yml index 9485d212b0d..f9dcb714857 100644 --- a/packages/kubernetes/manifest.yml +++ b/packages/kubernetes/manifest.yml @@ -1,7 +1,7 @@ format_version: 3.1.2 name: kubernetes title: Kubernetes -version: 1.82.0 +version: 1.82.1 description: Collect logs and metrics from Kubernetes clusters with Elastic Agent. type: integration categories: