Commit graph

10927 commits

Author SHA1 Message Date
kaisecheng
dbb06c20cf
update ironbank image to ubi9/9.5 (#16825) 2024-12-19 22:54:25 +00:00
Cas Donoghue
a6d6df0e8e
Pin logstash-input-elastic_serverless_forwarder to 1.0 (#16816)
The logstash-input-elastic_serverless_forwarder plugin has been promoted from
tech preview to GA. This commit updates the 8.x stream of logstash to use the
new 1.x series of the plugin.
2024-12-19 13:08:18 -08:00
github-actions[bot]
d9e345b784
Doc: Update security docs to replace obsolete cacert setting (#16798) (#16802) 2024-12-16 16:23:16 -05:00
github-actions[bot]
38e16187a8
Release notes for 8.17.0 (#16768) (#16789)
* Update release notes for 8.17.0

---------

Co-authored-by: logstashmachine <43502315+logstashmachine@users.noreply.github.com>
Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
Co-authored-by: Rob Bavey <rob.bavey@elastic.co>
(cherry picked from commit f663392a91)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2024-12-16 09:25:06 +00:00
github-actions[bot]
baa03ab690
Update serverless tests to include product origin header (#16766) (#16797)
This commit updates the curl scripts that interact with Kibana's
`api/logstash/pipeline/*` endpoin. Additionally this adds the header to any curl
that interacts with elasticsearch API as well.

(cherry picked from commit 188d9e7ed8)

Co-authored-by: Cas Donoghue <cas.donoghue@gmail.com>
2024-12-13 10:27:08 -08:00
Cas Donoghue
625439b541
Add x-elastic-product-origin header to kibana requests (#16765)
This commit updates the Kibana client to add a `x-elastic-product-origin` header
with the value `logstash` for any requests originating from logstash to indicate
which internal product is using the API.
2024-12-09 10:08:46 -08:00
Ry Biesemeyer
3954b61c9d
Major-pin default plugins (#16763)
* Major-pin default plugins

pins all default plugins _optimistically_ to the major.minor in the head of 8.17's `Gemfile.*.lock`, in order to avoid accidentally shipping _any_ plugin's breaking changes in the 8.x series.

* remove duplication of es output

* dont require plugins in Gemfile

* give more memory to tests. 2gb instead of 512mb

---------

Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
Co-authored-by: João Duarte <jsvduarte@gmail.com>
2024-12-09 10:05:55 -08:00
github-actions[bot]
652c2dab4b
ensure inputSize state value is reset during buftok.flush (#16760) (#16769)
(cherry picked from commit e36cacedc8)

Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
2024-12-09 09:46:19 -08:00
github-actions[bot]
5b3e62e52d
ensure jackson overrides are available to static initializers (#16719) (#16756)
Moves the application of jackson defaults overrides into pure java, and
applies them statically _before_ the `org.logstash.ObjectMappers` has a chance
to start initializing object mappers that rely on the defaults.

We replace the runner's invocation (which was too late to be fully applied) with
a _verification_ that the configured defaults have been applied.

(cherry picked from commit 202d07cbbf)

Co-authored-by: Ry Biesemeyer <yaauie@users.noreply.github.com>
2024-12-06 11:09:19 -05:00
Rob Bavey
1d82e377ff
Pin plugins that incorporate breaking changes in 9.0 (#16759)
A number of plugins include breaking changes in 9.x, which, without
restriction, will be included in development `8.x` branches that do
not include a lockfile.

This commit adds these to the Gemfile.template to avoid being introduced
in 8.x development branches
2024-12-05 15:57:53 -05:00
github-actions[bot]
38257e3e69
Pin date dependency to 3.3.3 (#16755) (#16761)
Resolves: #16095, #16754
(cherry picked from commit ab19769521)

Co-authored-by: Rob Bavey <rob.bavey@elastic.co>
2024-12-05 15:56:22 -05:00
github-actions[bot]
0cfb5cf4b5
Pin jar-dependencies to 0.4.1 (#16747) (#16748)
Pin jar-dependencies to `0.4.1`, until https://github.com/jruby/jruby/issues/7262
is resolved.

(cherry picked from commit e3265d93e8)

Co-authored-by: Rob Bavey <rob.bavey@elastic.co>
2024-12-04 10:09:47 -05:00
github-actions[bot]
8061387de9
Docs: Troubleshooting update for JDK bug handling cgroups v1 (#16721) (#16730)
---------
Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
Co-authored-by: Karen Metts <35154725+karenzone@users.noreply.github.com>

(cherry picked from commit d913e2ae3d)

Co-authored-by: mmahacek <mark.mahacek@elastic.co>
2024-11-27 13:50:01 +00:00
Cas Donoghue
03d57a1d95
Revert "Backport PR #16482 to 8.x: Bugfix for BufferedTokenizer to completely consume lines in case of lines bigger then sizeLimit (#16569)" (#16714)
This reverts commit 27bd2a039b.
2024-11-21 09:18:40 -08:00
github-actions[bot]
aa4302001f
Release notes for 8.16.1 (#16691) (#16708)
Co-authored-by: logstashmachine <43502315+logstashmachine@users.noreply.github.com>
Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
Co-authored-by: Karen Metts <35154725+karenzone@users.noreply.github.com>
(cherry picked from commit 8b97c052e6)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2024-11-20 18:29:25 -05:00
João Duarte
4176d5e775
bump to 8.18.0-SNAPSHOT (#16702) 2024-11-20 16:38:37 +00:00
github-actions[bot]
edb438769a
Update license checker with new logger dependency (#16695) (#16699)
A new transative dependency on the `logger` gem has been added through sinatra 4.1.0. Update the
license checker to ensure this is accounted for.

(cherry picked from commit e0ed994ab1)

Co-authored-by: Cas Donoghue <cas.donoghue@gmail.com>
2024-11-20 16:25:56 +00:00
Ry Biesemeyer
8af6343a26
PipelineBusV2 deadlock proofing (#16671)
* pipeline bus: add deadlock test for unlisten/unregisterSender

* pipeline bus: eliminate deadlock

Moves the sync-to-notify out of the `AddressStateMapping#mutate`'s effective
synchronous block to eliminate a race condition where unlistening to an address
and unregistering a sender could deadlock.

It is safe to notify an AddressState's attached input without exclusive access
to the AddressState, because notifying an input that has since been disconnected
is net zero harm.
2024-11-18 08:43:11 -08:00
github-actions[bot]
18e1545e4b
Updates release notes for 8.14.x to call for an update. (#16675) (#16676)
Updates release notes for `8.14.x` to call for an update to a subsequent minor for fix performance regression in JSON decoding.

Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
(cherry picked from commit 52836f8caf)

Co-authored-by: Andrea Selva <selva.andre@gmail.com>
2024-11-18 08:49:35 +01:00
github-actions[bot]
01dcd621d3
Doc: Realign release notes and add known issue (#16663) (#16668)
(cherry picked from commit 15cdf5c63d)

Co-authored-by: Karen Metts <35154725+karenzone@users.noreply.github.com>
2024-11-12 15:19:30 -05:00
github-actions[bot]
a402be0b8f
Release notes for 8.16.0 (#16605) (#16662)
* Update release notes for 8.16.0

* Refine release notes

* Apply suggestions from code review

Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
Co-authored-by: Andrea Selva <selva.andre@gmail.com>

* Refine release notes

* Apply suggestions from code review

Co-authored-by: Andrea Selva <selva.andre@gmail.com>

* Apply suggestions from code review

Co-authored-by: João Duarte <jsvd@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Karen Metts <35154725+karenzone@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Karen Metts <35154725+karenzone@users.noreply.github.com>

* Added dependency update section for new jruby version

---------

Co-authored-by: logstashmachine <43502315+logstashmachine@users.noreply.github.com>
Co-authored-by: edmocosta <11836452+edmocosta@users.noreply.github.com>
Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
Co-authored-by: Andrea Selva <selva.andre@gmail.com>
Co-authored-by: Karen Metts <35154725+karenzone@users.noreply.github.com>
Co-authored-by: Rob Bavey <rob.bavey@elastic.co>
(cherry picked from commit 8b897915cd)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2024-11-11 16:56:46 -05:00
kaisecheng
9ad33e21b9
add deprecation warning for allow_superuser: true (#16555) 2024-11-06 17:47:17 +00:00
github-actions[bot]
54caef7a29
Update .ruby-version to jruby-9.4.9.0 (#16642) (#16645)
(cherry picked from commit efbee31461)

Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
2024-11-06 12:46:06 +00:00
Andrea Selva
4201628f9e
Update depreacation warning to provide the version the ArcSight module is removed. (#16648) 2024-11-06 12:30:45 +01:00
github-actions[bot]
00898bd560
For custom java plugins, set the platform = 'java'. (#16628) (#16649)
(cherry picked from commit 046ea1f5a8)

Co-authored-by: Nicole Albee <2642763+a03nikki@users.noreply.github.com>
2024-11-06 08:54:06 +00:00
github-actions[bot]
0657729cb7
bump jruby to 9.4.9.0 (#16634) (#16639)
(cherry picked from commit 6703aec476)

Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
2024-11-06 08:23:32 +00:00
github-actions[bot]
aea58a36a9
Anchor the -java match pattern at the end of the string. (#16626) (#16637)
This fixes the offline install problem of the logstash-input-java_filter_example off-line install.

(cherry picked from commit 113585d4a5)

Co-authored-by: Nicole Albee <2642763+a03nikki@users.noreply.github.com>
2024-11-05 14:25:29 +00:00
github-actions[bot]
a7384c0d6c
fix Windows java not found log (#16633) (#16636)
(cherry picked from commit 849f431033)

Co-authored-by: kaisecheng <69120390+kaisecheng@users.noreply.github.com>
2024-11-05 10:45:59 +00:00
github-actions[bot]
37b1e9006e
Update JDK to latest in versions.yml (#16627) (#16631)
Update JDK to version 21.0.5+11

(cherry picked from commit 852149be2e)

Co-authored-by: Andrea Selva <selva.andre@gmail.com>
2024-11-04 17:25:31 +01:00
github-actions[bot]
2bcb5adcbb
add boostrap to docker build to fix missing jars (#16622) (#16623)
The DRA build failed because the required jars were missing, as they had been removed during the Docker build process.

(cherry picked from commit 00da72378b)

Co-authored-by: kaisecheng <69120390+kaisecheng@users.noreply.github.com>
2024-11-01 15:48:36 +00:00
github-actions[bot]
6c8e086d5e
reduce effort during build of docker images (#16619) (#16620)
there's no need to build jdk-less and windows tarballs for docker images
so this change simplifies the build process.

It should reduce the time spent needed to build docker images.

(cherry picked from commit 9eced9a106)

Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
2024-10-31 17:04:50 +00:00
github-actions[bot]
1cbd092b6f
make docker build and gradle tasks more friendly towards ci output (#16618) (#16621)
(cherry picked from commit 472e27a014)

Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
2024-10-31 17:04:42 +00:00
github-actions[bot]
b242715f76
[CI] Change agent for JDK availability check and add schedule also for 8.x (#16614) (#16617)
Switch execution agent of JDK availability check pipeline from vm-agent to container-agent.
Moves the schedule definition from the `Logstash Pipeline Scheduler` pipeline into the pipeline definition, adding a schedule also for `8.x` branch.

(cherry picked from commit c602b851bf)

Co-authored-by: Andrea Selva <selva.andre@gmail.com>
2024-10-30 12:52:03 +01:00
github-actions[bot]
1335ec80f3
Fix bad reference to a variable (#16615) (#16616)
(cherry picked from commit 5d523aa5c8)

Co-authored-by: Andrea Selva <selva.andre@gmail.com>
2024-10-30 12:51:14 +01:00
github-actions[bot]
51851a99d3
Use jvm catalog for reproducible builds and expose new pipeline to check JDK availability (#16602) (#16609)
Updates the existing `createElasticCatalogDownloadUrl` method to use the precise version retrieved `versions.yml` to download the JDK instead of using the latest of major version. This makes the build reproducible again.
Defines a new Gradle `checkNewJdkVersion` task to check if there is a new JDK version available from JVM catalog matching the same major of the current branch.
Creates a new Buildkite pipeline to execute a `bash` script to run the Gradle task; plus it also update the `catalog-info.yaml` with the new pipeline and a trigger to execute every week.

(cherry picked from commit ed5874bc27)

Co-authored-by: Andrea Selva <selva.andre@gmail.com>
2024-10-30 12:15:08 +01:00
github-actions[bot]
d6c96b407f
make max inflight warning global to all pipelines (#16597) (#16601)
The current max inflight error message focuses on a single pipeline and on a maximum amount of 10k events regardless of the heap size.

The new warning will take into account all loaded pipelines and also consider the heap size, giving a warning if the total number of events consumes 10% or more of the total heap.

For the purpose of the warning events are assumed to be 2KB as it a normal size for a small log entry.

(cherry picked from commit ca19f0029e)

Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
2024-10-25 15:16:18 +01:00
Edmo Vamerlatti Costa
79e439e27b
bump version to 8.17.0 (#16592) 2024-10-24 09:45:56 +01:00
github-actions[bot]
8fb1292934
Release notes for 8.15.3 (#16527) (#16571)
* Update release notes for 8.15.3

* Refined release notes

* Apply suggestions from code review

* Update docs/static/releasenotes.asciidoc

---------

Co-authored-by: logstashmachine <43502315+logstashmachine@users.noreply.github.com>
Co-authored-by: edmocosta <11836452+edmocosta@users.noreply.github.com>
Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
Co-authored-by: Karen Metts <35154725+karenzone@users.noreply.github.com>
(cherry picked from commit 2788841f5c)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2024-10-18 11:11:33 +02:00
github-actions[bot]
7e1877ca12
add http.* deprecation log (#16538) (#16582)
- refactor deprecated alias to support obsoleted version
- add deprecation log for http.* config

(cherry picked from commit 3f0ad12d06)

Co-authored-by: kaisecheng <69120390+kaisecheng@users.noreply.github.com>
2024-10-17 16:23:15 +01:00
github-actions[bot]
27bd2a039b
Backport PR #16482 to 8.x: Bugfix for BufferedTokenizer to completely consume lines in case of lines bigger then sizeLimit (#16569)
Fixes the behaviour of the tokenizer to be able to work properly when buffer full conditions are met.

Updates BufferedTokenizerExt so that can accumulate token fragments coming from different data segments. When a "buffer full" condition is matched, it record this state in a local field so that on next data segment it can consume all the token fragments till the next token delimiter.
Updated the accumulation variable from RubyArray containing strings to a StringBuilder which contains the head token, plus the remaining token fragments are stored in the input array.
Furthermore it translates the `buftok_spec` tests into JUnit tests.

(cherry picked from commit 85493ce864)

Co-authored-by: Andrea Selva <selva.andre@gmail.com>
2024-10-16 17:32:52 +02:00
github-actions[bot]
216c68f280
Backport PR #16564 to 8.x: Adds a JMH benchmark to test BufferedTokenizerExt class(#16570)
Adds a JMH benchmark to measure the peformances of BufferedTokenizerExt.
Update also Gradle build script to remove CMS GC flags and fix deprecations for Gradle 9.0.

Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
(cherry picked from commit b6f16c8b81)

Co-authored-by: Andrea Selva <selva.andre@gmail.com>
2024-10-16 17:31:46 +02:00
github-actions[bot]
6a573f40fa
ensure minitar 1.x is used instead of 0.x (#16565) (#16566)
(cherry picked from commit ab77d36daa)

Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
2024-10-16 13:35:42 +01:00
Andrea Selva
396b3fef40
Deprecate for removal ArcSight module (#16551)
Logs a deprecation when Logstash 8.x is started with ArsSight module.

Co-authored-by: João Duarte <jsvd@users.noreply.github.com>
2024-10-15 19:50:19 +02:00
Andrea Selva
c1374a1d81
Log deprecation warn if memory buffer type not defined (#16498)
On 8.x series log a deprecation log if the user didn't explicitly specify a selection for pipeline.buffer.type. Before this change the default was silently set to direct, after this change if not explicitly defined, the default is still direct but log a deprecation log.

Co-authored-by: Ry Biesemeyer <yaauie@users.noreply.github.com>
2024-10-15 16:03:41 +02:00
kaisecheng
4677cb22ed
add modules deprecation log for netflow, fb_apache and azure (#16548)
relates: #16357
2024-10-14 12:40:45 +01:00
github-actions[bot]
dc0739bdaf
refactor log for event_api.tags.illegal (#16545) (#16547)
- add `obsoleted_version` and remove `deprecated_msg` from `deprecated_option` for consistent warning message

(cherry picked from commit 8cd0fa8767)

Co-authored-by: kaisecheng <69120390+kaisecheng@users.noreply.github.com>
2024-10-11 21:51:53 +01:00
github-actions[bot]
a1f4633b55
Backport PR #16525 to 8.x: [test] Fix xpack test to check for http_address stats only if the webserver is enabled (#16531)
* [test] Fix xpack test to check for http_address stats only if the webserver is enabled (#16525)

Set the 'api.enabled' setting to reflect the flag webserver_enabled and consequently test for http_address presence in settings iff the web server is enabled.

(cherry picked from commit 648472106f)

* Update also the global LogStash::SETTINGS's 'api.enabled' setting value becuase used in the constructor of StatsEventFactory and needs to be in synch with the settings provided to the Agent constructor

---------

Co-authored-by: Andrea Selva <selva.andre@gmail.com>
2024-10-11 15:24:11 +02:00
github-actions[bot]
8c6832e3d9
Backport PR #16506 to 8.x: Avoid to access Java DeprecatedAlias value other than Ruby's one
Update Settings to_hash method to also skip Java DeprecatedAlias and not just the Ruby one.
With PR #15679 was introduced org.logstash.settings.DeprecatedAlias which mirrors the behaviour of Ruby class Setting::DeprecatedAlias. The equality check at Logstash::Settings, as descibed in #16505 (comment), is implemented comparing the maps.
The conversion of Settings to the corresponding maps filtered out the Ruby implementation of DeprecatedAlias but not the Java one.
This PR adds also the Java one to the list of filter.

(cherry picked from commit 5d4825f000)

Co-authored-by: Andrea Selva <selva.andre@gmail.com>
2024-10-11 11:00:48 +02:00
github-actions[bot]
0594c8867f
Backport PR #15679 to 8.x: [Spacetime] Reimplement config Setting classe in java (#16490)
* [Spacetime] Reimplement config Setting classe in java (#15679)

Reimplement the root Ruby Setting class in Java and use it from the Ruby one moving the original Ruby class to a shell wrapping the Java instance.
In particular create a new symmetric hierarchy (at the time just for `Setting`, `Coercible` and `Boolean` classes) to the Ruby one, moving also the feature for setting deprecation. In this way the new `org.logstash.settings.Boolean` is syntactically and semantically equivalent to the old Ruby Boolean class, which replaces.

(cherry picked from commit 61de60fe26)

* Adds supress warnings related to this-escape for Java Settings classes

---------

Co-authored-by: Andrea Selva <selva.andre@gmail.com>
2024-10-11 08:54:03 +02:00
github-actions[bot]
26c2f61276
Flow worker utilization probe (#16532) (#16537)
* flow: refactor pipeline refs to keep worker flows separate

* health: add worker_utilization probe

pipeline is:
  - RED "completely blocked" when last_5_minutes >= 99.999
  - YELLOW "nearly blocked" when last_5_minutes > 95
    - and inludes "recovering" info when last_1_minute < 80
  - YELLOW "completely blocked" when last_1_minute >= 99.999
  - YELLOW "nearly blocked" when last_1_minute > 95

* tests: improve coverage of PipelineIndicator probes

* Apply suggestions from code review

(cherry picked from commit a931b2cde6)

Co-authored-by: Ry Biesemeyer <yaauie@users.noreply.github.com>
2024-10-10 19:59:43 -07:00