Fix missing event module field in El Proxy signed documents
We recently identified and fixed a bug affecting Elasticsearch logs signed by El Proxy. The issue stemmed from missing index templates for Elastic Agent integrations, causing logs to match the default El Proxy templates, which lacked essential fields like “event.module.” To resolve this, we’ve automated the creation and update of the Elastic Agent integration index templates for El Proxy. Now, any integration added or updated on connected Elastic Agents will use the correct template, ensuring that logs signed by El Proxy contain all necessary fields.
List of updated packages
To solve the issue, the following packages have been updated
elastic-agent,elastic-agent-autosetup,elastic-agent-neteye-config,elastic-stack-configurator,elasticsearch,elasticsearch-autosetup,elasticsearch-neteye-config,elasticsearch-xpack-license,filebeat,filebeat-autosetup,filebeat-neteye-config,kibana,kibana-autosetup,kibana-neteye-config,logstash,logstash-autosetup,logstash-neteye-config,logstash-neteye-config-autosetupto version 8.17.3_neteye3.72.12-1elastic-blockchain-proxy,elastic-blockchain-proxy-autosetup,elastic-blockchain-proxy-configuatorto version 1.7.3-1
Emil Fazzi
Software Developer, R&D Team in the "IT System & Service Management Solutions" group at Würth Phoenix.
Author
Latest posts by Emil Fazzi
17. 01. 2025
Automation, Development, Documentation, Log-SIEM
Elasticsearch Magic: Achieving Zero Downtime during User Guide Updates