in shippers/es.py [0:0]
def _discover_dataset(self, event_payload: Dict[str, Any]) -> None:
if self._es_datastream_name != "":
if self._es_datastream_name.startswith("logs-"):
datastream_components = self._es_datastream_name.split("-")
if len(datastream_components) == 3:
self._dataset = datastream_components[1]
self._namespace = datastream_components[2]
else:
shared_logger.debug(
"es_datastream_name not matching logs datastream pattern, no dataset and namespace set"
)
else:
shared_logger.debug(
"es_datastream_name not matching logs datastream pattern, no dataset and namespace set"
)
self._es_index = self._es_datastream_name
return
else:
self._namespace = "default"
if "meta" not in event_payload or "integration_scope" not in event_payload["meta"]:
self._dataset = "generic"
else:
self._dataset = event_payload["meta"]["integration_scope"]
if self._dataset == "aws.cloudtrail-digest":
self._dataset = "aws.cloudtrail"
if self._dataset == "generic":
shared_logger.debug("dataset set to generic")
shared_logger.debug("dataset", extra={"dataset": self._dataset})
self._es_index = f"logs-{self._dataset}-{self._namespace}"
self._es_datastream_name = self._es_index