move ipsec_tunnel metrics to routing in sample events

elastic · Sep 12, 2024 · abdce3a · abdce3a
1 parent aaab4ad
commit abdce3a
Show file tree

Hide file tree

Showing 5 changed files with 42 additions and 42 deletions.
diff --git a/packages/panw_metrics/data_stream/routing/fields/fields.yml b/packages/panw_metrics/data_stream/routing/fields/fields.yml
@@ -195,4 +195,4 @@
         - name: kb
           type: long
           description: Traffic volume limit for SA rekeying
-          unit: byte
+          unit: byte
diff --git a/packages/panw_metrics/data_stream/routing/sample_event.json b/packages/panw_metrics/data_stream/routing/sample_event.json
@@ -74,6 +74,26 @@
                 "last_update_age": 300,
                 "status_flap_counts": 2,
                 "established_counts": 10
+            },
+            "ipsec_tunnel": {
+                "id": "tunnel-001",
+                "name": "Site-A-to-Site-B",
+                "gw": "203.0.113.1",
+                "TSi_ip": "10.0.0.0",
+                "TSi_prefix": "24",
+                "TSi_proto": "any",
+                "TSi_port": 0,
+                "TSr_ip": "192.168.0.0",
+                "TSr_prefix": "24",
+                "TSr_proto": "any",
+                "TSr_port": 0,
+                "proto": "ESP",
+                "mode": "tunnel",
+                "dh": "group14",
+                "enc": "aes-256-cbc",
+                "hash": "sha256",
+                "life": 28800,
+                "kb": 102400
             }
         }
     }

diff --git a/packages/panw_metrics/data_stream/vpn/fields/fields.yml b/packages/panw_metrics/data_stream/vpn/fields/fields.yml
@@ -111,4 +111,4 @@
         - name: total_previous_users
           type: long
           description: Total previous number of users connected to GlobalProtect
-          metric_type: gauge
+          metric_type: gauge
diff --git a/packages/panw_metrics/data_stream/vpn/sample_event.json b/packages/panw_metrics/data_stream/vpn/sample_event.json
@@ -76,26 +76,6 @@
                 },
                 "total_current_users": 500,
                 "total_previous_users": 480
-            },
-            "ipsec_tunnel": {
-                "id": "tunnel-001",
-                "name": "Site-A-to-Site-B",
-                "gw": "203.0.113.1",
-                "TSi_ip": "10.0.0.0",
-                "TSi_prefix": "24",
-                "TSi_proto": "any",
-                "TSi_port": 0,
-                "TSr_ip": "192.168.0.0",
-                "TSr_prefix": "24",
-                "TSr_proto": "any",
-                "TSr_port": 0,
-                "proto": "ESP",
-                "mode": "tunnel",
-                "dh": "group14",
-                "enc": "aes-256-cbc",
-                "hash": "sha256",
-                "life": 28800,
-                "kb": 102400
             }
         }
     }

diff --git a/packages/panw_metrics/docs/README.md b/packages/panw_metrics/docs/README.md
@@ -296,6 +296,26 @@ An example event for `routing` looks as following:
                 "last_update_age": 300,
                 "status_flap_counts": 2,
                 "established_counts": 10
+            },
+            "ipsec_tunnel": {
+                "id": "tunnel-001",
+                "name": "Site-A-to-Site-B",
+                "gw": "203.0.113.1",
+                "TSi_ip": "10.0.0.0",
+                "TSi_prefix": "24",
+                "TSi_proto": "any",
+                "TSi_port": 0,
+                "TSr_ip": "192.168.0.0",
+                "TSr_prefix": "24",
+                "TSr_proto": "any",
+                "TSr_port": 0,
+                "proto": "ESP",
+                "mode": "tunnel",
+                "dh": "group14",
+                "enc": "aes-256-cbc",
+                "hash": "sha256",
+                "life": 28800,
+                "kb": 102400
             }
         }
     }
@@ -649,26 +669,6 @@ An example event for `vpn` looks as following:
                 },
                 "total_current_users": 500,
                 "total_previous_users": 480
-            },
-            "ipsec_tunnel": {
-                "id": "tunnel-001",
-                "name": "Site-A-to-Site-B",
-                "gw": "203.0.113.1",
-                "TSi_ip": "10.0.0.0",
-                "TSi_prefix": "24",
-                "TSi_proto": "any",
-                "TSi_port": 0,
-                "TSr_ip": "192.168.0.0",
-                "TSr_prefix": "24",
-                "TSr_proto": "any",
-                "TSr_port": 0,
-                "proto": "ESP",
-                "mode": "tunnel",
-                "dh": "group14",
-                "enc": "aes-256-cbc",
-                "hash": "sha256",
-                "life": 28800,
-                "kb": 102400
             }
         }
     }