PB-1351 Add service-control data stream

packages/ppbgdi/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.0.1"
+  changes:
+    - description: Add service control log parsing
+      type: enhancement
+      link: https://github.com/geoadmin/infra-elastic-integrations/pull/32
 - version: "1.0.0"
   changes:
     - description: Enhance cloudfront realtime log parsing

packages/ppbgdi/data_stream/python_logs/routing_rules.yml

@@ -72,3 +72,8 @@
       namespace:
         - "{{data_stream.namespace}}"
         - default
+    - target_dataset: ppbgdi.service_control_logs
+      if: ctx?.service?.name != null && ctx?.service?.name == 'service-control'
+      namespace:
+        - "{{data_stream.namespace}}"
+        - default

packages/ppbgdi/data_stream/service_control_logs/fields/base-fields.yml

@@ -0,0 +1,12 @@
+- name: data_stream.type
+  type: constant_keyword
+  description: Data stream type.
+- name: data_stream.dataset
+  type: constant_keyword
+  description: Data stream dataset.
+- name: data_stream.namespace
+  type: constant_keyword
+  description: Data stream namespace.
+- name: '@timestamp'
+  type: date
+  description: Event timestamp.

packages/ppbgdi/data_stream/service_control_logs/manifest.yml

@@ -0,0 +1,13 @@
+title: "Service Control Logs"
+type: logs
+streams:
+  - input: logfile
+    title: Sample logs
+    description: Collect sample logs
+    vars:
+      - name: paths
+        type: text
+        title: Paths
+        multi: true
+        default:
+          - /var/log/*.log

packages/ppbgdi/manifest.yml

@@ -1,7 +1,7 @@
 format_version: 3.1.1
 name: ppbgdi
 title: "PPBGDI"
-version: 1.0.0
+version: 1.0.1
 source:
   license: "Apache-2.0"
 description: "Collect logs and metrics from PPBGDI, via kubernetes or Elastic Agent"