- Allow the possibility to set a prefix for role and policy when deploying with the
publish_lambda.sh
script: #399
- Explicitly set
SqsManagedSseEnabled
in CF template for replay and continuing queues for stack created before September/October 2022: #353
- Add
root_fields_to_add_to_expanded_event
input setting to merge fields at root level when expanding a list of events from field: #290
- Reduced logging verbosity: #287
- Fix potential
PolicyLengthExceededException
when usingcloudwatch-logs
input: #283
- Fix events mutation across different outputs of the same input, proper handling of multiple outputs in the replay queue handler, proper handling of non json content where no json object start was ever met in the storage json collector: #260
- Fix throttling exception in
cloudwatch-logs
input related to DescribeLogStreams: #276
- Fix wrong resolved
expand_event_list_from_field
with AWS CloudTrail due to race condition: #244 - Fix shipper cache to include output type in the key: #245
- Added support for Logstash as output (Technical Preview): #210
- Changed event ID format to use a SHA3 384bit hash of AWS-provided ids: #227
- Fix
kinesis-data-stream
data payload type decoding and empty fields in message attributes insqs
continuation: #228 - Handle missing matching
_id
from failed actions in elasticsearch output: #230
- Allow for extra customisation on event triggers and vpc at deployment: #201
- Improve instrumented performance bumping elastic-apm to 6.14.0: #220
- Changed ID generation logic to use AWS-provided ids: #214
- Allow to connect to ES with self-signed certificate through certificate fingerprint assertion: #173
- Allow to use a CloudWatch Logs Log Stream ARN as ID for
cloudwatch-logs
input type: #160 - Respect batch settings of original input in replay queue: #157
- Add
json_content_type
input setting as optional hint for json content auto discovery: #145 - Switch timeout handling for
kinesis-data-stream
input to continuing queue like any other input: #146 - Handle continuation from offset in the list when dealing with
expand_event_list_from_field
: #147 - Improve json parser and dumper performance: #148
- Fix multiline documentation to properly render: #137
- Add support for collecting multiline messages in a single event: #135
- Handle proper ARN format for CloudWatch Logs Log Group in the macro, as received from
ElasticServerlessForwarderCloudWatchLogsEvents
CloudFormation Parameter : #130
- Handle properly gzip content regardless of the content type in S3 storage: #128
- Add support for expanding an events list from a json field: #124
- Promote to GA: #126
- Removed deprecated
es_index_or_datastream_name
config param: #126
- Add support for AWS IaC deployment with CloudFormation and terraform: #115
- Deprecate
es_index_or_datastream_name
config param in favour ofes_datastream_name
one: #115
- Handle properly
cloudwatch-logs
content payload: #113
- Add support for AWS CloudTrail logs: #110
- Handle properly flushing in
kinesis-data-stream
input type, handle properly empty messages in include exclude filters, handle properly empty lines inJsonCollector
decorator, identify properly CloudWatch Logs payload: #107
- Make the integration scope discovery available at Input component: #106
- Handle failure of replayed messages: #105
- Handle properly messages in the continuing queue originated from the continuing queue itself: #104
- Add support for providing
S3_CONFIG_FILE
env variable as cloudformation param: #103
- Add support for collecting json content spanning multiple lines: #99
- Add support for include/exclude filter: #97
- Extract
fields
subfields at event root and make metadata for CloudWatch Logs in event in sync with Elastic Agent: #98
- Support handling of continuing queue with batch size greater than 1: #95
- Add support for CloudWatch Logs subscription filter input: #94
- Add support for direct
sqs
input: #91
- Set default
S3_CONFIG_FILE
env variable to "s3://": #90
- Remove
aws.lambda
,aws.sns
andaws.s3_storage_lens
metrics datasets auto-discovery #82
- Add support for sending data to an index or alias on top of datastream for the Elasticsearch output (
dataset
andnamespace
config params replaced byes_index_or_datastream_name
): #73
- Set HTTP compression always on and max retries to not exceed 15 mins in the ES client #69
- Add support for
kinesis-data-stream
input: #66
- Expose
batch_max_actions
andbatch_max_bytes
config params for ES shipper: #65
- Handle batches of SQS records: #63
- Replay queue for ES ingestion phase failure: #60
- Routing support for AWS Services logs: #58
- Let the Lambda fail and end up in built-in retry mechanism in case of errors before ingestion phase: #57
- Support for tags: #45
- General performance refactoring after stress test outcome: #48
- Support for Secrets Manager: #42
- Integration tests for AWS Lambda handler: #24
- Proper handling of empty lines in
by_lines
decorator: #26
- Support for cloud_id and api_key in elasticsearch client: #14
- Tests for remaining packages: #12
- Optimise storage memory usage: #11
- Tests for share packages: #10
- Refactoring in offset marker: #9
- Support for type checking and related refactoring: #8
- Config support on AWS Lambda handler: #7
- First draft of the AWS Lambda handler with no config: #2