[Anthropic]: Audit Overview Dashboard - Panel data incorrect

Open Beginner friendly
#20,881 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
74/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Active
Tech stack
elasticsearch
Domain
observability

Research direction

Start with the Anthropic integration's Logs Anthropic Audit Overview dashboard and compare the Top Related IPs panel with Top Actors. Confirm which field each panel aggregates, then update the panel so it uses an IP address field and verify that the displayed values are IP addresses rather than actors.

Written by the indexing model from the issue text.

Description

bug Integration:anthropic needs:triage Team:Security-Service Integrations
Integration Name

Anthropic [packages/anthropic]

Dataset Name

anthropic.audit

Integration Version

1.1.0

Agent Version

9.5.1

Agent Output Type

elasticsearch

Elasticsearch Version

9.5.1

OS Version and Architecture

MacOS

Software/API Version

No response

Error Message

No response

Event Original

No response

What did you do?

Open the [Logs Anthropic] Audit Overview dashboard and review the Top Related IPs dashboard panel.

What did you see?

This dashboard panel is a duplicate of Top Actors and aggregates based on user.name rather than an IP address.

What did you expect to see?

This dashboard should have IP addresses not Actors as the aggregate field.

Anything else?

No response

Dominant language
Handlebars
Stars
334
Forks
652
Avg merge
1d 22h
Merged PRs (30d)
241

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from elastic/integrations

All issues in elastic/integrations

Similar issues

More Observability & SRE issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.