Skip to content

Updated AI Insights dashboard filter and modified "ssl_cipher_suite_id" script lookup mapping#17297

Open
apps-elastic-gigamon wants to merge 1 commit intoelastic:mainfrom
apps-elastic-gigamon:insights
Open

Updated AI Insights dashboard filter and modified "ssl_cipher_suite_id" script lookup mapping#17297
apps-elastic-gigamon wants to merge 1 commit intoelastic:mainfrom
apps-elastic-gigamon:insights

Conversation

@apps-elastic-gigamon
Copy link
Contributor

  • Enhancement

Proposed commit message

Updated AI Insights dashboard filter and modified "ssl_cipher_suite_id" script lookup mapping

Explain here the changes you made on the PR.

  1. Updated the AI Insights dashboard to use a wildcard filter on gigamon.ami.app_tags, so all AI-related engines/apps are detected instead of matching only a fixed string.
  2. ssl_cipher_suite_id lookup logic
  • Modified the ingest pipeline script in default.yml to:
    • Only perform table lookups for numericssl_cipher_suite_id values.
    • Safely read from the ssl_cipher_suite_id mapping, setting:
      • gigamon.ami.ssl_cipher_suite_id_value to the first mapping entry.
      • gigamon.ami.ssl_cipher_suite_id_protocol to the second entry when present.
    • Fall back to using the original string value directly when the ID is already a readable TLS cipher name (non-numeric) or when no mapping entry exists.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Screenshots

AI_Insights_Dashboard

@apps-elastic-gigamon apps-elastic-gigamon requested a review from a team as a code owner February 7, 2026 07:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant