Description
Integration Name
JumpCloud [jumpcloud]
Dataset Name
jumpcloud.events
Integration Version
1.15.0
Agent Version
9.0.3
Agent Output Type
elasticsearch
Elasticsearch Version
9.0.3
OS Version and Architecture
Not Applicable
Software/API Version
Not Applicable
Error Message
Quality issues identified by Elastic 9.0.3 built-in Data Set Quality feature,
- jumpcloud.event.profile_list.signer_certificates field ignored
- jumpcloud.event.command.payload field ignored
Both with,
Potential cause: field character limit exceeded
Maximum character length: 1024
In both cases these fields contain very long base64 encoded strings, e.g. PEM format X.509 certificates, or XML.
They fields should remain as keywords, however the ability to search for exact an exact match would be useful, as such ignore_above for these fields should be expanded to 4096.
Upon review of the current event types being produced by a production JumpCloud tenant it has also become clear that the defined field list is missing a large number of fields that will be produced.
Event Original
Refer to PR and updated pipeline tests, two additional events have been added for testing.
What did you do?
Used 9.0.3 Data Set Quality features.
What did you see?
Reported problem.
What did you expect to see?
No problem.
Anything else?
No response