Skip to content

Commit 7462c4f

Browse files
ShourieGShourieG
authored
[Zscaler ZIA] - Added request tracing config option for http_endpoint input (#13302)
Added request tracing config option for http_endpoint input for each relevant data stream. The tracing options are at the data stream level so maximum flexibility is provided.
1 parent 5a27b75 commit 7462c4f

File tree

14 files changed

+80
-3
lines changed

14 files changed

+80
-3
lines changed

‎packages/zscaler_zia/changelog.yml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,9 @@
11
# newer versions go on top
2+
- version: "3.9.0"
3+
changes:
4+
- description: Added request tracing config option for http_endpoint input.
5+
type: enhancement
6+
link: https://github.com/elastic/integrations/pull/13302
27
- version: "3.8.0"
38
changes:
49
- description: Add agentless deployment.

‎packages/zscaler_zia/data_stream/audit/agent/stream/http_endpoint.yml.hbs‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,9 @@
11
listen_address: {{listen_address}}
22
listen_port: {{listen_port}}
3+
{{#if enable_request_tracer}}
4+
tracer.filename: "../../logs/http_endpoint/http-request-trace-*.ndjson"
5+
tracer.maxbackups: 5
6+
{{/if}}
37
content_type: ""
48
preserve_original_event: true
59
{{#if secret_header}}

‎packages/zscaler_zia/data_stream/audit/manifest.yml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -113,3 +113,11 @@ streams:
113113
description: >
114114
Additional settings to be added to the configuration. Be careful using this as it might break the input as those settings are not validated and can override the settings specified above. See [`HTTP Endpoint` input settings docs](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-http_endpoint.html) for details.
115115
116+
- name: enable_request_tracer
117+
type: bool
118+
title: Enable request tracing
119+
multi: false
120+
required: false
121+
show_user: false
122+
description: >-
123+
The request tracer logs HTTP requests to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-http_endpoint.html#_tracer_enabled_3) for details.

‎packages/zscaler_zia/data_stream/dns/agent/stream/http_endpoint.yml.hbs‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,9 @@
11
listen_address: {{listen_address}}
22
listen_port: {{listen_port}}
3+
{{#if enable_request_tracer}}
4+
tracer.filename: "../../logs/http_endpoint/http-request-trace-*.ndjson"
5+
tracer.maxbackups: 5
6+
{{/if}}
37
content_type: ""
48
preserve_original_event: true
59
{{#if secret_header}}

‎packages/zscaler_zia/data_stream/dns/manifest.yml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -113,3 +113,11 @@ streams:
113113
description: >
114114
Additional settings to be added to the configuration. Be careful using this as it might break the input as those settings are not validated and can override the settings specified above. See [`HTTP Endpoint` input settings docs](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-http_endpoint.html) for details.
115115
116+
- name: enable_request_tracer
117+
type: bool
118+
title: Enable request tracing
119+
multi: false
120+
required: false
121+
show_user: false
122+
description: >-
123+
The request tracer logs HTTP requests to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-http_endpoint.html#_tracer_enabled_3) for details.

‎packages/zscaler_zia/data_stream/endpoint_dlp/agent/stream/http_endpoint.yml.hbs‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,9 @@
11
listen_address: {{listen_address}}
22
listen_port: {{listen_port}}
3+
{{#if enable_request_tracer}}
4+
tracer.filename: "../../logs/http_endpoint/http-request-trace-*.ndjson"
5+
tracer.maxbackups: 5
6+
{{/if}}
37
content_type: ""
48
preserve_original_event: true
59
{{#if secret_header}}

‎packages/zscaler_zia/data_stream/endpoint_dlp/manifest.yml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -113,3 +113,11 @@ streams:
113113
description: >
114114
Additional settings to be added to the configuration. Be careful using this as it might break the input as those settings are not validated and can override the settings specified above. See [`HTTP Endpoint` input settings docs](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-http_endpoint.html) for details.
115115
116+
- name: enable_request_tracer
117+
type: bool
118+
title: Enable request tracing
119+
multi: false
120+
required: false
121+
show_user: false
122+
description: >-
123+
The request tracer logs HTTP requests to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-http_endpoint.html#_tracer_enabled_3) for details.

‎packages/zscaler_zia/data_stream/firewall/agent/stream/http_endpoint.yml.hbs‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,9 @@
11
listen_address: {{listen_address}}
22
listen_port: {{listen_port}}
3+
{{#if enable_request_tracer}}
4+
tracer.filename: "../../logs/http_endpoint/http-request-trace-*.ndjson"
5+
tracer.maxbackups: 5
6+
{{/if}}
37
content_type: ""
48
preserve_original_event: true
59
{{#if secret_header}}

‎packages/zscaler_zia/data_stream/firewall/manifest.yml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -112,3 +112,11 @@ streams:
112112
description: >
113113
Additional settings to be added to the configuration. Be careful using this as it might break the input as those settings are not validated and can override the settings specified above. See [`HTTP Endpoint` input settings docs](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-http_endpoint.html) for details.
114114
115+
- name: enable_request_tracer
116+
type: bool
117+
title: Enable request tracing
118+
multi: false
119+
required: false
120+
show_user: false
121+
description: >-
122+
The request tracer logs HTTP requests to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-http_endpoint.html#_tracer_enabled_3) for details.

‎packages/zscaler_zia/data_stream/tunnel/agent/stream/http_endpoint.yml.hbs‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,9 @@
11
listen_address: {{listen_address}}
22
listen_port: {{listen_port}}
3+
{{#if enable_request_tracer}}
4+
tracer.filename: "../../logs/http_endpoint/http-request-trace-*.ndjson"
5+
tracer.maxbackups: 5
6+
{{/if}}
37
content_type: ""
48
preserve_original_event: true
59
{{#if secret_header}}

0 commit comments

Comments
 (0)