[Fleet] Cannot add integration policy - handlebar template evaluation problem

Fleet fails to create an integration package policy for aws_logs when using the parsers configuration setting.

Kibana version: 8.13.2

Steps to reproduce:

Add integration policy to a Fleet agent policy.

PUT kbn:/api/fleet/package_policies/3a08dc8c-f304-4bc6-bf10-157b170f8353
{
  "package": {
    "name": "aws_logs",
    "version": "1.1.0"
  },
  "name": "aws_logs-1",
  "namespace": "",
  "description": "",
  "policy_id": "0f10626f-11ff-40ea-a579-fcdbb5825654",
  "vars": {
    "endpoint": "",
    "default_region": ""
  },
  "inputs": {
    "aws_logs-aws-s3": {
      "enabled": true,
      "streams": {
        "aws_logs.generic": {
          "enabled": true,
          "vars": {
            "number_of_workers": 1,
            "bucket_list_interval": "120s",
            "file_selectors": [],
            "fips_enabled": false,
            "include_s3_metadata": [],
            "max_bytes": "10MiB",
            "max_number_of_messages": 5,
            "parsers": "- multiline:\n    pattern: '\\s*{$'\n",
            "queue_url": "http://foo.example.com",
            "sqs.max_receive_count": 5,
            "sqs.wait_time": "20s",
            "tags": [
              "forwarded"
            ],
            "preserve_original_event": false,
            "data_stream.dataset": "aws_logs.generic",
            "custom": ""
          }
        }
      }
    }
  }
}

The problematic part is the parsers configuration which was entered into the UI as

- multiline:
    pattern: '\s*{$'

Submit the policy and an error is returned.

{"statusCode":500,"error":"Internal Server Error","message":"unexpected end of the stream within a single quoted scalar at line 25, column 1:\n    \n    ^"}

This is another example parser config that fails.

- multiline:
    type: pattern
    pattern: '\s*{$'
    flush_pattern: '^\s*}$'
    negate: true
    match: after

config handlebar template - https://github.com/elastic/integrations/blob/73da1da03e640df6196385c4cd7e6832efb87c4f/packages/aws_logs/data_stream/generic/agent/stream/aws-s3.yml.hbs#L152-L153

elastic / kibana

[Fleet] Cannot add integration policy - handlebar template evaluation problem #181495

Related