Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[exporter/elasticsearch] handle ecs mode mapping #31553

Merged
merged 20 commits into from
Apr 10, 2024
Merged

[exporter/elasticsearch] handle ecs mode mapping #31553

merged 20 commits into from
Apr 10, 2024

Conversation

j-kap-t
Copy link
Contributor

@j-kap-t j-kap-t commented Mar 4, 2024

Description:

Initial pass in implementing the ecs mapping mode that is documented but not implemented. This only covers a small subset of attribute mappings from otel > ecs, but the core record fields should be properly mapped.

Link to tracking Issue:

Testing:
Added test for ecs mapping mode.

Documentation:
Updated the documentation to reflect the default behavior is the current behavior with no mapping applied.

Reopening #30454

@j-kap-t
Copy link
Contributor Author

j-kap-t commented Mar 12, 2024

@ycombinator @gregkalapos thanks for the feedback. I hope I addressed the concerns. I wasn't the original dev on this internally, I'm just tying up some loose ends from someone who left us last year.

@ycombinator
Copy link
Contributor

Thanks @j-kap-t! I reviewed the changes and they look good to me. I'm not an approver, however, so I believe @JaredTan95 will need to review and approve this PR to get it merged.

Also, thanks for the additional context re: tying up loose ends. Appreciate you doing that! I'm working on a follow up PR (#31694) where we can expand upon the foundation you're laying here for mapping.mode: ecs.

@j-kap-t
Copy link
Contributor Author

j-kap-t commented Mar 19, 2024

@codeboten Is there anything left needed for approval & merge? Thanks!

@j-kap-t
Copy link
Contributor Author

j-kap-t commented Mar 27, 2024

@JaredTan95 fixed.

@j-kap-t
Copy link
Contributor Author

j-kap-t commented Apr 1, 2024

@JaredTan95 @codeboten @djaglowski is there anything left needed to merge?

@ycombinator
Copy link
Contributor

ycombinator commented Apr 3, 2024

@open-telemetry/collector-contrib-maintainer This PR has the component approver's approval and so I think is ready to merge now, whenever you get a chance. Thanks!

mx-psi pushed a commit that referenced this pull request Apr 5, 2024
**Description:** 

This PR proposes adding @ycombinator as a codeowner for the
`elasticsearch` exporter component, being an [employee of
Elastic](https://www.linkedin.com/company/elastic-co/people/?keywords=shaunak)
and also meeting the codeowner
[requirements](https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/main/CONTRIBUTING.md#requirements):

1. [Be a member of the OpenTelemetry
organization.](https://github.com/open-telemetry/community/blob/main/community-membership.md#member)
   * https://github.com/orgs/open-telemetry/people?query=ycombinator
2. (Code Owner Discretion) It is best to have resolved an issue related
to the component, contributed directly to the component, and/or review
component PRs. How much interaction with the component is required
before becoming a Code Owner is up to any existing Code Owners.
* Resolved
#26647
via
#29619
* Reviewed
#31553
* Contributed
#31694
as follow up to
#31553
* Reviewed
#31848

document.AddString("log.level", record.SeverityText())

if record.Body().Type() == pcommon.ValueTypeStr {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Does this mean that if body of the log is not a string, it is dropped? Is this the intended behavior?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh I can see a previous comment about this: #31553 (comment).

I'm not sure if handing other body types in another PR is good enough, given that the component's stability is "Beta".

Can we at least create a separate issue to fix this after this PR is merged (hopefully soon)?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looking more into this, it seems there might be more changes coming in future PRs to how the ecs mapping mode works. Is this a reasonable assumption?

If yes, I propose to add a note in the README warning users that the ecs mapping mode is currently not stable. This note could be removed after this mode stabilizes.

What do you think @ycombinator @j-kap-t ?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@astencel-sumo Yes, there is at least one follow up PR in the works for ecs mapping mode already: #31694. And there might be others too in the future. So I like the idea of adding a note to the README warning users that ecs mapping mode is experimental or something to that effect as part of this PR.

j-kap-t and others added 4 commits April 9, 2024 08:43
Co-authored-by: Andrzej Stencel <astencel@sumologic.com>
Co-authored-by: Andrzej Stencel <astencel@sumologic.com>
@andrzej-stencel
Copy link
Member

Thanks for the updates @j-kap-t . Can you also update the README, adding a note to the ecs mapping mode like " ⚠️ This mode's behavior is unstable, it is currently undergoing changes." or something similar?

@andrzej-stencel andrzej-stencel merged commit 0bd0379 into open-telemetry:main Apr 10, 2024
170 checks passed
@github-actions github-actions bot added this to the next release milestone Apr 10, 2024
andrzej-stencel added a commit that referenced this pull request May 7, 2024
….mode: ecs` (#31694)

**Description:** <Describe what has changed.>

This PR is a follow up to
#31553.
In that PR, the foundations were laid for encoding log records with ECS
fields when the user specifies `mapping.mode: ecs` in their exporter
configuration.

This PR adds ECS conversions for several additional fields.

I expect there will be more followup PR(s) to add more conversions,
especially ones that might not be straightforward.

**Link to tracking issue:** #29742 

**Testing:** Added unit tests

**Documentation:** The `mapping.mode: ecs` configuration setting is
already
[documented](https://github.com/open-telemetry/opentelemetry-collector-contrib/tree/main/exporter/elasticsearchexporter#configuration-options).

---------

Co-authored-by: Andrzej Stencel <andrzej@andrzejstencel.pl>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants