elastic / integrations

Elastic Integrations
https://www.elastic.co/integrations
Other
199 stars 429 forks source link

[Auth0]: Broken dashboard visualizations #11362

Open buzzdeee opened 1 week ago

buzzdeee commented 1 week ago

Integration Name

Auth0 [auth0]

Dataset Name

auth0.logs

Integration Version

1.18.0

Agent Version

8.15.0

Agent Output Type

elasticsearch

Elasticsearch Version

8.15.0

OS Version and Architecture

Ubuntu 20.04 LTS

Software/API Version

Auth0 API

Error Message

The managed Auth0 dashboard has visualizations related to failed and successful logins. These are all broken. As example for a query of the "Rate of Successful logins": it's looking for data_stream.dataset: auth0.logs and event.category: "Login - Success" However, the event.category on such events is [ authentication, session ]. The "Login - Success" string can be found in field: auth0.logs.data.classification

Event Original

No response

What did you do?

looking at the Auth0 dashboard

What did you see?

empty visualizations

What did you expect to see?

visualizations showing values

Anything else?

No response

elasticmachine commented 6 days ago

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)