From b4545c4e734e7e85442f8c1381018bd54e3417e9 Mon Sep 17 00:00:00 2001 From: Sharad Kevadiya Date: Thu, 9 Jul 2026 10:36:41 +0530 Subject: [PATCH 1/2] replace try/has with is_error --- packages/cato_networks/changelog.yml | 5 +++++ .../cato_networks/data_stream/audit/agent/stream/cel.yml.hbs | 2 +- packages/cato_networks/manifest.yml | 2 +- 3 files changed, 7 insertions(+), 2 deletions(-) diff --git a/packages/cato_networks/changelog.yml b/packages/cato_networks/changelog.yml index fdf88506865..ef63af8f73c 100644 --- a/packages/cato_networks/changelog.yml +++ b/packages/cato_networks/changelog.yml @@ -1,4 +1,9 @@ # later versions go on top +- version: '0.1.1' + changes: + - description: Simplify the audit `last_timestamp` parse guard to use `is_error` instead of `try`/`has`. + type: enhancement + link: https://github.com/elastic/integrations/pull/1 - version: '0.1.0' changes: - description: Initial release of package. diff --git a/packages/cato_networks/data_stream/audit/agent/stream/cel.yml.hbs b/packages/cato_networks/data_stream/audit/agent/stream/cel.yml.hbs index 2b262cf24e1..05da35fd3ac 100644 --- a/packages/cato_networks/data_stream/audit/agent/stream/cel.yml.hbs +++ b/packages/cato_networks/data_stream/audit/agent/stream/cel.yml.hbs @@ -100,7 +100,7 @@ program: | // auditFeed.to may echo back the non-RFC3339 request layout, so guard the // parse and fall back to window_to instead of aborting the final page. "last_timestamp": body.data.auditFeed.?to.optMap(v, - try(timestamp(v), "error").as(t, !has(t.error) ? + timestamp(v).as(t, !is_error(t) ? t.format("2006-01-02/15:04:05") : window_to diff --git a/packages/cato_networks/manifest.yml b/packages/cato_networks/manifest.yml index 51dda242514..81e8a698dbc 100644 --- a/packages/cato_networks/manifest.yml +++ b/packages/cato_networks/manifest.yml @@ -1,7 +1,7 @@ format_version: 3.4.2 name: cato_networks title: Cato Networks -version: 0.1.0 +version: 0.1.1 description: Collect logs from Cato Networks with Elastic Agent. type: integration categories: From 471bee77f239a27a816cdaa3257ade7c5050e54f Mon Sep 17 00:00:00 2001 From: Sharad Kevadiya Date: Thu, 9 Jul 2026 10:53:52 +0530 Subject: [PATCH 2/2] update changelog entry --- packages/cato_networks/changelog.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/cato_networks/changelog.yml b/packages/cato_networks/changelog.yml index ef63af8f73c..bf2c3997dab 100644 --- a/packages/cato_networks/changelog.yml +++ b/packages/cato_networks/changelog.yml @@ -3,7 +3,7 @@ changes: - description: Simplify the audit `last_timestamp` parse guard to use `is_error` instead of `try`/`has`. type: enhancement - link: https://github.com/elastic/integrations/pull/1 + link: https://github.com/elastic/integrations/pull/20051 - version: '0.1.0' changes: - description: Initial release of package.