Open ckauf opened 1 month ago
Upon closer inspection it looks like the included azure shared pipeline is not executed. However that would also not solve the problem because the App Service integration parses the fields to azure.resource.id
while the shared pipeline expects it to be in azure.resource_id
.
None of the Azure App Service Datasets contains the
azure.subscription_id
field. This can be validated by checking the expected JSONs, e.g. here: https://github.com/elastic/integrations/blob/main/packages/azure_app_service/data_stream/app_service_logs/_dev/test/pipeline/test-appserviceapplogs-raw.log-expected.jsonFor comparison a Azure Activity Logs example https://github.com/elastic/integrations/blob/main/packages/azure/data_stream/activitylogs/_dev/test/pipeline/test-activitylogs-edgecases.log-expected.json