elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.71k stars 8.12k forks source link

[fleet] Migrate from custom telemetry sender to the new Core-provided one #137964

Open afharo opened 2 years ago

afharo commented 2 years ago

Hi folks!

I'm creating this issue to track the effort for migrating the current custom telemetry sender in x-pack/plugins/fleet/server/telemetry/sender.ts to the new Core APIs to send telemetry events: core.analytics.

The full documentation can be found at https://docs.elastic.dev/telemetry/collection/event-based-telemetry

Essentially, during the setup phase of your plugin, you need to register the event and the structure that you're planning to send via:

export class MyPlugin extends Plugin {
...
  public setup(core, pluginDependencies) {
    core.analytics.registerEventType({
      eventType: 'my_fleet_event_name',
      schema: {...}, // Declaration of the structure of the event
    });
  }
...
}

Then, anytime you need to ship any events, you can call core.analytics.reportEvent('my_fleet_event_name', {...contentOfTheEvent});. The API reportEvent is available in the setup and start contracts.

Some relevant documentation about the APIs can be found in the client's package readme: https://github.com/elastic/kibana/blob/main/packages/analytics/client/README.md#reporting-events:

Added benefits

Changes to your current implementation

Looking at your implementation, you would call events.forEach((event) => core.analytics.reportEvent(channel, event)) inside your queueTelemetryEvents method, and you can delete all the rest 😇

Remember that, during the setup phase, you'll need to declare all the events you report FleetTelemetryChannelEvents (currently only fleet-upgrades).

Testing

There are some Jest mocks you can use for unit tests. They are exported alongside the core mocks.

But we also offer some FTR helpers to make developing FTR tests much easier. You can find them in test/analytics in the Kibana repo.

Indexer considerations

⚠️ You may need to create a new indexer for this new implementation considering these 2 changes:

The structure of the events with the new API looks like this:

{
  "event_type": "my_fleet_event_name",
  "timestamp": "2022-08-03T00:00:00.000Z", // <- automatically populated the moment you call `reportEvent`
  "context": {...}, // All the info coming from the Context Providers
  "properties": {...} // The event data provided as the second parameter in the call to `reportEvent`.
}

The target channels that the core API sends this data to are kibana-server and kibana-browser, depending on where the event was generated (on the server or the browser, respectively).

elasticmachine commented 2 years ago

Pinging @elastic/fleet (Feature:Fleet)

elasticmachine commented 2 years ago

Pinging @elastic/fleet (Team:Fleet)

juliaElastic commented 2 years ago

This change would fix this issue as well: https://github.com/elastic/kibana/issues/137845