-
Notifications
You must be signed in to change notification settings - Fork 3.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Doc: Message Logstash module deprecations and removal #16840
base: main
Are you sure you want to change the base?
Conversation
📃 DOCS PREVIEW ✨ https://logstash_bk_16840.docs-preview.app.elstc.co/diff |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
All look good to me. I think we need to update the CEF part of deploying and scaling Logstash as it still points to a blog post of arcsight module.
Maybe point it to CEF integration?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pointer to more appropriate azure module replacement
[discrete] | ||
[role="exclude",id="azure-module"] | ||
==== Azure module (deprecated) | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The Azure Event Hub integration is a more natural replacement - the Azure module for metricbeat is more for general azure process monitoring, whereas event hubs are the azure equivalent of Kafka. It is the Azure event hub plugin that the module works with
📃 DOCS PREVIEW ✨ https://logstash_bk_16840.docs-preview.app.elstc.co/diff |
|
||
The https://azure.microsoft.com/en-us/overview/what-is-azure/[Microsoft Azure] | ||
module in Logstash helps you easily integrate your Azure activity logs and SQL | ||
diagnostic logs with the Elastic Stack. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm not sure if I'd keep the descriptive blurbs underneath. WDYT?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I deleted a lot of text, but left the highlevel descriptions in to provide a bit of context. If somebody has a link, sending them to a heading and a deprecation notice doesn't seem to be enough. That context might help them decide if they're interesting in pursuing the alternatives we suggest.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Actually, looking further into it - https://www.elastic.co/guide/en/integrations/current/azure-events.html might be a better link - it seems much more comprehensive than the one I linked earlier, and does a lot more than our module does/did
@flexitrev WDYT?
Related:
#16590
#16739
Messages deprecation of Logstash modules to preserve links and offer users a path forward with other options.
Next steps @karenzone: