Apache OCSF pipeline

[jbfeldman-dd]

What does this PR do?

Creates an OCSF pipeline for Apache Web Server logs

[github-actions]

⚠️ Recommendation: Add qa/skip-qa label

This PR does not modify any files shipped with the agent.

To help streamline the release process, please consider adding the qa/skip-qa label if these changes do not require QA testing.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 220507bd04

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[jbfeldman-dd]

Validation output

INFO:root:Error messages: {
  "Observable index 0 \"name\" value \"ocsf.src_endpoint\" does not refer to an attribute defined in class \"http_activity\" uid 4002.": 2,
  "Observable index 1 \"name\" value \"ocsf.src_endpoint.ip\" does not refer to an attribute defined in class \"http_activity\" uid 4002.": 2,
  "Observable index 2 \"name\" value \"ocsf.http_request.url\" does not refer to an attribute defined in class \"http_activity\" uid 4002.": 2,
  "Observable index 3 \"name\" value \"ocsf.http_request.user_agent\" does not refer to an attribute defined in class \"http_activity\" uid 4002.": 1
}

[cepolation-datadog]

LGTM

Review from cepolation-datadog is dismissed. Related teams and files:

• logs-integrations-reviewers
  • apache/assets/logs/apache.yaml