From 4674ad1052ab9779ee1de49fb6fb08e62a672ee9 Mon Sep 17 00:00:00 2001 From: subham sarkar Date: Thu, 6 Nov 2025 16:39:20 +0530 Subject: [PATCH 1/2] system/network: Fix interfaces filtering --- packages/system/changelog.yml | 5 +++++ .../system/data_stream/network/agent/stream/stream.yml.hbs | 6 ++++++ packages/system/data_stream/network/manifest.yml | 3 +-- packages/system/manifest.yml | 2 +- 4 files changed, 13 insertions(+), 3 deletions(-) diff --git a/packages/system/changelog.yml b/packages/system/changelog.yml index d4bf3db8a97..1cb369db833 100644 --- a/packages/system/changelog.yml +++ b/packages/system/changelog.yml @@ -1,4 +1,9 @@ # newer versions go on top +- version: "2.7.1" + changes: + - description: Fix network data stream interface filtering by populating both legacy top-level `interfaces` and nested `network.interfaces` fields. + type: bugfix + link: https://github.com/elastic/integrations/pull/15883 - version: "2.7.0" changes: - description: Add NTP data stream. diff --git a/packages/system/data_stream/network/agent/stream/stream.yml.hbs b/packages/system/data_stream/network/agent/stream/stream.yml.hbs index 63c1be47bdf..37af0a95558 100644 --- a/packages/system/data_stream/network/agent/stream/stream.yml.hbs +++ b/packages/system/data_stream/network/agent/stream/stream.yml.hbs @@ -1,5 +1,11 @@ metricsets: ["network"] period: {{period}} +{{! Populate both 'interfaces' and 'network.interfaces'. Beats currently exposes 'interfaces' as a top-level field instead of nesting it under 'network', so duplicating it keeps existing Beats behavior working. Once Beats aligns on the nested field, we can drop the legacy top-level field. }} +interfaces: +{{#each network.interfaces}} +- {{this}} +{{/each}} +{{! For now, 'network.interfaces' is a no-op field. But might be used in the future. }} network.interfaces: {{#each network.interfaces}} - {{this}} diff --git a/packages/system/data_stream/network/manifest.yml b/packages/system/data_stream/network/manifest.yml index 5a3f4eb034e..fe5e2c144e4 100644 --- a/packages/system/data_stream/network/manifest.yml +++ b/packages/system/data_stream/network/manifest.yml @@ -19,8 +19,7 @@ streams: required: false show_user: true description: > - List of interfaces to monitor. Will monitor all by default. - + List of interfaces to monitor. If not set, all interfaces are monitored by default. - name: tags type: text title: Tags diff --git a/packages/system/manifest.yml b/packages/system/manifest.yml index 3277cdcd34b..17fe053a008 100644 --- a/packages/system/manifest.yml +++ b/packages/system/manifest.yml @@ -1,7 +1,7 @@ format_version: 3.0.2 name: system title: System -version: "2.7.0" +version: "2.7.1" description: Collect system logs and metrics from your servers with Elastic Agent. type: integration categories: From 35e21873a23438a197090be9651c6670eb6ff831 Mon Sep 17 00:00:00 2001 From: subham sarkar Date: Fri, 7 Nov 2025 00:13:03 +0530 Subject: [PATCH 2/2] Update packages/system/data_stream/network/agent/stream/stream.yml.hbs Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- packages/system/data_stream/network/agent/stream/stream.yml.hbs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/system/data_stream/network/agent/stream/stream.yml.hbs b/packages/system/data_stream/network/agent/stream/stream.yml.hbs index 37af0a95558..df51ae41b01 100644 --- a/packages/system/data_stream/network/agent/stream/stream.yml.hbs +++ b/packages/system/data_stream/network/agent/stream/stream.yml.hbs @@ -5,7 +5,7 @@ interfaces: {{#each network.interfaces}} - {{this}} {{/each}} -{{! For now, 'network.interfaces' is a no-op field. But might be used in the future. }} +{{! 'network.interfaces' is currently being populated for future use or compatibility, but may not be actively used by Beats yet. }} network.interfaces: {{#each network.interfaces}} - {{this}}