Skip to content

Commit e719239

Browse files
authored
Map os name in IIS OCSF pipeline (DataDog#22584)
* map os name * fix target
1 parent aa88427 commit e719239

2 files changed

Lines changed: 8 additions & 0 deletions

File tree

iis/assets/logs/iis.yaml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -334,6 +334,13 @@ pipeline:
334334
target: ocsf.src_endpoint.ip
335335
preserveSource: true
336336
overrideOnConflict: true
337+
- type: schema-remapper
338+
name: Map `http.useragent_details.os.family` to `ocsf.src_endpoint.os.name`
339+
sources:
340+
- http.useragent_details.os.family
341+
target: ocsf.src_endpoint.os.name
342+
preserveSource: true
343+
overrideOnConflict: true
337344
- type: schema-category-mapper
338345
name: ocsf.src_endpoint.os.type_id
339346
categories:

iis/assets/logs/iis_tests.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -63,6 +63,7 @@ tests:
6363
src_endpoint:
6464
ip: "123.123.123.123"
6565
os:
66+
name: "Windows"
6667
type: "Windows"
6768
type_id: 100
6869
status: "Success"

0 commit comments

Comments
 (0)