Skip to content

[AWS GuardDuty] - Updated docs to address data duplication issue when using GuardDuty API #15858

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[AWS GuardDuty] - Updated docs to address data duplication issue when using GuardDuty API #15858

wants to merge 1 commit into from
+8 −2

Conversation

@ShourieG
Copy link
Contributor

@ShourieG ShourieG commented Nov 4, 2025

Type of change

  • Documentation

Proposed commit message

See title.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • [ ]

How to test this PR locally

Related issues

Screenshots

@ShourieG ShourieG self-assigned this Nov 4, 2025
@ShourieG ShourieG requested review from a team as code owners November 4, 2025 07:09
@ShourieG ShourieG added documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. Integration:aws AWS Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] labels Nov 4, 2025
@elasticmachine
Copy link

elasticmachine commented Nov 4, 2025

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

efd6
efd6 reviewed Nov 4, 2025
View reviewed changes
Copy link
Contributor

@efd6 efd6 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we want a release for this?

packages/aws/_dev/build/docs/guardduty.md

**Note**:
- It is recommended to use AWS SQS for Amazon GuardDuty.
- When using the Amazon GuardDuty API to collect logs, there is a known issue where data duplication can occur due to certain API limitations.
Copy link
Contributor

@efd6 efd6 Nov 4, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
- When using the Amazon GuardDuty API to collect logs, there is a known issue where data duplication can occur due to certain API limitations.
- When using the Amazon GuardDuty API to collect logs, data duplication can occur due to limitations with the current input.

@elastic-vault-github-plugin-prod
Copy link

elastic-vault-github-plugin-prod bot commented Nov 4, 2025

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@elasticmachine
Copy link

elasticmachine commented Nov 4, 2025

💚 Build Succeeded

cc @ShourieG

@andrewkroh andrewkroh added the Team:obs-ds-hosted-services Observability Hosted Services team [elastic/obs-ds-hosted-services] label Nov 4, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@efd6 efd6 efd6 left review comments

At least 1 approving review is required to merge this pull request.

Assignees

@ShourieG ShourieG

Labels

documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. Integration:aws AWS Team:obs-ds-hosted-services Observability Hosted Services team [elastic/obs-ds-hosted-services] Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@ShourieG @elasticmachine @efd6 @andrewkroh