Skip to content

in_winevtlog: Enrich EventData key-value map if enabled [Backport to 4.2] - #12161

Merged
cosmo0920 merged 2 commits into
4.2from
cosmo0920-enrich-event-data-on-in_winevtlog-4.2
Jul 30, 2026
Merged

in_winevtlog: Enrich EventData key-value map if enabled [Backport to 4.2]#12161
cosmo0920 merged 2 commits into
4.2from
cosmo0920-enrich-event-data-on-in_winevtlog-4.2

Conversation

@cosmo0920

@cosmo0920 cosmo0920 commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

Backporting of #12082.

I confirmed that this patch works for collecting metadata of EventData.


Enter [N/A] in the box, if an item is not applicable to your change.

Testing
Before we can approve your change; please submit the following in a comment:

  • Example configuration file for the change
  • Debug log output from testing the change
  • Attached Valgrind output that shows no leaks or memory corruption was found

If this is a change to packaging of containers or native binaries then please confirm it works for all targets.

  • Run local packaging test showing all targets (including any new ones) build.
  • Set ok-package-test label to test for all targets (requires maintainer to do).

Documentation

  • Documentation required for this feature

Backporting

  • Backport to latest stable release.

Fluent Bit is licensed under Apache 2.0, by submitting this pull request I understand that this code will be released under the terms of that license.

Signed-off-by: Hiroshi Hatake <hiroshi@chronosphere.io>
Signed-off-by: Hiroshi Hatake <hiroshi@chronosphere.io>
@coderabbitai

coderabbitai Bot commented Jul 27, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: a0d73460-27f5-43a5-8076-2127a79d1f80

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch cosmo0920-enrich-event-data-on-in_winevtlog-4.2

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@cosmo0920
cosmo0920 merged commit dcfa1c0 into 4.2 Jul 30, 2026
56 checks passed
@cosmo0920
cosmo0920 deleted the cosmo0920-enrich-event-data-on-in_winevtlog-4.2 branch July 30, 2026 01:30
@cosmo0920 cosmo0920 added this to the Fluent Bit v4.2.8 milestone Jul 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant