logging

Search before asking

• I had searched in the issues and found no similar feature requirement.

Description

The plugin HttpPlugin of nodejs agent not intercept the method http.get

Use case

No response

Related issues

No response

Are you willing to submit a PR?

• Yes I am willing to submit a PR!

Is your feature request related to a problem? Please describe.
CEF (Common Event Format) is a logging format used by some tools. Loki and promtail should have a built in parser for it so that I can extract CEF fields as labels.
CEF messages look something like:

CEF:0|Palo Alto Networks|Cortex XDR|Cortex XDR 2.4|X

Logstash information:

Please include the following information:

1. Logstash version: 7.16.3 (with unverified reports of similar behaviour on 7.15)

   Looking through our case history there were examples of this issue happening after upgrading to 7.15 and higher. The odd behavior is this appears to be intermittent in most cases, and the cases closed out without resolution. Confirmed

This happens occasionally when shutting down the server:

Exception in thread "http-worker-15" java.lang.NullPointerException: null value in entry: exception=null
        at com.google.common.collect.CollectPreconditions.checkEntryNotNull(CollectPreconditions.java:32)
        at com.google.common.collect.ImmutableMap.entryOf(ImmutableMap.java:176)
        at com.google.common.collect.I

The generic Windows audit log config lacks many event ids, e.g.

• registry events
• driver load service addition events, System/7045 and Security/4697
• likely others