{"action":"created","comment":{"url":"https://api.github.com/repos/elastic/logstash/pulls/comments/134959463","pull_request_review_id":58312610,"id":134959463,"diff_hunk":"@@ -0,0 +1,405 @@\n+[role=\"xpack\"]\n+[[arcsight-module]]\n+=== Logstash ArcSight Module\n+\n+++++\n+<titleabbrev>ArcSight Module</titleabbrev>\n+++++\n+\n+NOTE: The Logstash ArcSight module is an\n+https://www.elastic.co/products/x-pack[X-Pack] feature under the Basic License\n+and is therefore free to use. Please contact\n+mailto:arcsight@elastic.co[arcsight@elastic.co] for questions or more\n+information.\n+\n+The Logstash ArcSight module enables you to easily integrate with and augment\n+the ArcSight Data Platform (ADP) to explore your data in Elasticsearch using\n+Kibana visualizations. With a single command, the module taps directly into the\n+ADP data stream, parses and indexes the security events into Elasticsearch, and\n+installs a suite of Kibana dashboards to get you exploring your data\n+immediately. \n+\n+[role=\"screenshot\"]\n+image::static/images/arcsight-architecture-diagram-2017.png[ArcSight architecture]\n+\n+[[arcsight-architecture]]\n+==== Deployment Architecture\n+\n+The Logstash ArcSight module understands CEF (Common Event Format), and can\n+accept, enrich, and index these events for analysis on the Elastic Stack. ADP\n+contains two core data collection components for data streaming:\n+\n+* The _EventBroker (EB)_ is the central hub for incoming data and is based on\n+open source Apache Kafka. The Logstash ArcSight module can consume directly from\n+EB topics.\n+* The _SmartConnectors (SC)_ are edge log collectors that parse and normalize\n+data to CEF prior to publishing to the EB.\n+\n+[[arcsight-getting-started]]\n+==== Getting Started\n+\n+To get started, you can use a basic Elastic Stack setup that reads events from\n+the EB event stream.\n+\n+[[arcsight-requirements]]\n+===== Requirements\n+\n+* These instructions assume you have the Elastic Stack (Logstash, Elasticsearch,\n+Kibana) already installed. The products you need are\n+https://www.elastic.co/downloads[available to download] and easy to install. The\n+Elastic Stack 5.6 or higher is required for this module.\n+* The Elastic Stack is running locally with default ports exposed, namely\n+Elasticsearch as “localhost:9200” and Kibana as “localhost:5601”.\n+* By default, the Logstash ArcSight module consumes from the EB “eb-cef” topic.\n+For additional EB settings, see <<arcsight-module-config>>. Consuming from a\n+secured EB port is not currently available.\n+\n+[[arcsight-instructions]]\n+===== Instructions\n+\n+. {ref}/installing-xpack-es.html[Install X-Pack on Elasticsearch] and then start\n+Elasticsearch.\n+\n+. {kibana-ref}/installing-xpack-kb.html[Install X-Pack on Kibana] and then start\n+Kibana.\n+\n+. {logstash-ref}/installing-xpack-log.html[Install X-Pack on Logstash], which\n+includes the Logstash ArcSight module. Then update the Logstash\n+<<plugins-inputs-kafka,Kafka input plugin>> to an EB compatible version. In the\n+Logstash install directory, run:\n++\n+[source,shell]\n+-----\n+bin/logstash-plugin install x-pack\n+bin/logstash-plugin install --version 6.2.7 logstash-input-kafka\n+-----\n+\n+. Start the Logstash ArcSight module by running the following command in the\n+Logstash install directory with your respective EB host and port:\n++\n+[source,shell]\n+-----\n+bin/logstash --modules arcsight --setup\n+  -M \"arcsight.var.input.eventbroker.bootstrap_servers={eb_host}:{eb_port}\" \n+  -M \"arcsight.var.elasticsearch.username=elastic\" \n+  -M \"arcsight.var.elasticsearch.password=changeme\" \n+  -M \"arcsight.var.kibana.username=elastic\" \n+  -M \"arcsight.var.kibana.password=changeme\"\n+-----\n++\n+--\n+TIP: The command in this example is formatted for readability. Remove the line\n+breaks before running this command.\n+\n+The `--modules arcsight` option spins up an ArcSight CEF-aware Logstash\n+pipeline for ingestion. The `--setup` option creates an `arcsight-*` index\n+pattern in Elasticsearch and imports Kibana dashboards and visualizations. On\n+subsequent module runs or when scaling out the Logstash deployment,\n+the `--setup` option should be omitted to avoid overwriting the existing Kibana\n+dashboards.\n+--\n+\n+. Explore your data with Kibana:\n+.. Open browser @ http://localhost:5601[http://localhost:5601] (username:\n+  “elastic”; password: “changeme”)\n+.. Open the “[ArcSight] Network Overview Dashboard”\n+.. See <<exploring-data-arcsight>> for additional details on data exploration.\n+\n+See <<configuring-arcsight>> if you want to specify additional options that\n+control the behavior of the ArcSight module.\n+\n+//ALVIN: All the config information needs to be together in one place, so I've added the above link and moved the section called \"Configuring the Module\" so that it appears along with the config options.\n+\n+[[exploring-data-arcsight]]\n+==== Exploring Your Security Data\n+Once the Logstash ArcSight module starts receiving events, you can immediately\n+begin using the packaged Kibana dashboards to explore and visualize your\n+security data. The dashboards rapidly accelerate the time and effort required\n+for security analysts and operators to gain situational and behavioral insights\n+on network, endpoint, and DNS events flowing through the environment. You can\n+use the dashboards as-is, or tailor them to work better with existing use cases\n+and business requirements.\n+\n+The dashboards have a navigation pane for context switching and drill downs\n+across three core use cases:\n+\n+* *Network Data*\n+** Dashboards: Network Overview, Network Suspicious Activity\n+** Data Types: Network firewalls, intrusion systems, VPN devices\n+\n+* *Endpoint Data*\n+** Dashboards: Endpoint Overview, Endpoint OS Activity\n+** Data Types: Operating systems, applications, host intrusion systems\n+\n+* *DNS Data*\n+** Dashboards: Microsoft DNS Overview\n+** Data Types: Microsoft DNS devices\n+\n+[[network-dashboards-arsight]]\n+===== Example Network Dashboards\n+\n+[role=\"screenshot\"]\n+image::static/images/arcsight-network-overview.png[Network overview dashboard]\n+\n+[role=\"screenshot\"]\n+image::static/images/arcsight-network-suspicious.png[Network suspicious activity dashboard]\n+\n+These Kibana visualizations enable you to quickly understand the top devices,\n+endpoints, attackers, and targets. This insight, along with the ability to\n+instantly drill down on a particular host, port, device, or time range, offers a\n+holistic view across the entire environment to identify specific segments that\n+may require immediate attention or action. You can easily discover answers to\n+questions like:\n+\n+* Who are my attackers and what are they targeting?\n+* Which of my devices or endpoints are the busiest and what services were\n+rendered?\n+* How many unique attackers, techniques, signatures, or targets were triggered\n+at any given point in time?\n+* What are the top sources, destinations, protocols, and behaviors that are\n+causing the elevated count of failures?\n+\n+[[configuring-arcsight]]\n+==== Configuring the Module\n+\n+You can specify additional options for the Logstash ArcSight module in the\n+`logstash.yml` configuration file or with overrides through the command line\n+like in the getting started. For more information about configuring modules, see\n+<<logstash-modules>>.\n+\n+As an example, the following settings can be appended to `logstash.yml` to\n+configure your module:\n+\n+[source,yaml]\n+-----\n+modules:\n+  - name: arcsight\n+    var.input.eventbroker.bootstrap_servers: “eb_host:39092”\n+    var.input.eventbroker.topics: “eb_topic”\n+    var.output.elasticsearch.hosts: \"localhost:9200\"\n+    var.elasticsearch.username: \"elastic\"\n+    var.elasticsearch.password: \"changeme\"\n+    var.kibana.host: “localhost:5601”\n+    var.kibana.username: \"elastic\"\n+    var.kibana.password: \"changeme\"\n+-----\n+\n+[[arcsight-module-config]]\n+===== Logstash ArcSight Module Configuration Options\n+\n+These are the configurable settings available for the Logstash ArcSight module.\n+When overriding settings in the command line, the setting option must be\n+prefixed with the module name, i.e. `arcsight.var.inputs` instead of `var.inputs`.\n+\n+All settings are optional. If you don't specify configuration settings, Logstash\n+uses the defaults.\n+\n+//ALVIN: I don't see a good reason to have the summary table plus the reference info, so I have not included the table. It doesn't add enough value to warrant the real estate it takes up. Plus...tables don't work well when we go from docbook > PDF. If you feel strongly about having it, you can submit a separate PR, but make sure you make each setting an active link, or users will be extra annoyed by the repeated info. I've modified the intro text slightly to reflect this change.","path":"docs/static/arcsight-module.asciidoc","position":197,"original_position":197,"commit_id":"68f40b1de164465a8d74937a1547520f8fb156eb","original_commit_id":"68f40b1de164465a8d74937a1547520f8fb156eb","user":{"login":"acchen97","id":13039544,"avatar_url":"https://avatars1.githubusercontent.com/u/13039544?v=4","gravatar_id":"","url":"https://api.github.com/users/acchen97","html_url":"https://github.com/acchen97","followers_url":"https://api.github.com/users/acchen97/followers","following_url":"https://api.github.com/users/acchen97/following{/other_user}","gists_url":"https://api.github.com/users/acchen97/gists{/gist_id}","starred_url":"https://api.github.com/users/acchen97/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/acchen97/subscriptions","organizations_url":"https://api.github.com/users/acchen97/orgs","repos_url":"https://api.github.com/users/acchen97/repos","events_url":"https://api.github.com/users/acchen97/events{/privacy}","received_events_url":"https://api.github.com/users/acchen97/received_events","type":"User","site_admin":false},"body":"fine by me! :+1:","created_at":"2017-08-24T08:46:34Z","updated_at":"2017-08-24T08:46:34Z","html_url":"https://github.com/elastic/logstash/pull/8063#discussion_r134959463","pull_request_url":"https://api.github.com/repos/elastic/logstash/pulls/8063","_links":{"self":{"href":"https://api.github.com/repos/elastic/logstash/pulls/comments/134959463"},"html":{"href":"https://github.com/elastic/logstash/pull/8063#discussion_r134959463"},"pull_request":{"href":"https://api.github.com/repos/elastic/logstash/pulls/8063"}}},"pull_request":{"url":"https://api.github.com/repos/elastic/logstash/pulls/8063","id":137347889,"html_url":"https://github.com/elastic/logstash/pull/8063","diff_url":"https://github.com/elastic/logstash/pull/8063.diff","patch_url":"https://github.com/elastic/logstash/pull/8063.patch","issue_url":"https://api.github.com/repos/elastic/logstash/issues/8063","number":8063,"state":"open","locked":false,"title":"[Docs] Add arcsight module docs contributed by acchen97","user":{"login":"dedemorton","id":14206422,"avatar_url":"https://avatars3.githubusercontent.com/u/14206422?v=4","gravatar_id":"","url":"https://api.github.com/users/dedemorton","html_url":"https://github.com/dedemorton","followers_url":"https://api.github.com/users/dedemorton/followers","following_url":"https://api.github.com/users/dedemorton/following{/other_user}","gists_url":"https://api.github.com/users/dedemorton/gists{/gist_id}","starred_url":"https://api.github.com/users/dedemorton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dedemorton/subscriptions","organizations_url":"https://api.github.com/users/dedemorton/orgs","repos_url":"https://api.github.com/users/dedemorton/repos","events_url":"https://api.github.com/users/dedemorton/events{/privacy}","received_events_url":"https://api.github.com/users/dedemorton/received_events","type":"User","site_admin":false},"body":"@acchen97  I've had to make some minor formatting changes to conform to Elastic style, but did not change the language unless otherwise noted in a comment. I don't have time to put these up on firebase, so you can either pull the files and run your own local build, or just review the content and wait until it's published and take a look at the formatting.\r\n\r\nPlease note that I did not test the steps because this content has already been tested and reviewed by Alvin and others.\r\n\r\n","created_at":"2017-08-24T00:47:38Z","updated_at":"2017-08-24T08:46:34Z","closed_at":null,"merged_at":null,"merge_commit_sha":"f7862888383bc90be0f8a26c054ee8f95c397eb4","assignee":null,"assignees":[],"requested_reviewers":[],"milestone":null,"commits_url":"https://api.github.com/repos/elastic/logstash/pulls/8063/commits","review_comments_url":"https://api.github.com/repos/elastic/logstash/pulls/8063/comments","review_comment_url":"https://api.github.com/repos/elastic/logstash/pulls/comments{/number}","comments_url":"https://api.github.com/repos/elastic/logstash/issues/8063/comments","statuses_url":"https://api.github.com/repos/elastic/logstash/statuses/68f40b1de164465a8d74937a1547520f8fb156eb","head":{"label":"dedemorton:arcsight_module","ref":"arcsight_module","sha":"68f40b1de164465a8d74937a1547520f8fb156eb","user":{"login":"dedemorton","id":14206422,"avatar_url":"https://avatars3.githubusercontent.com/u/14206422?v=4","gravatar_id":"","url":"https://api.github.com/users/dedemorton","html_url":"https://github.com/dedemorton","followers_url":"https://api.github.com/users/dedemorton/followers","following_url":"https://api.github.com/users/dedemorton/following{/other_user}","gists_url":"https://api.github.com/users/dedemorton/gists{/gist_id}","starred_url":"https://api.github.com/users/dedemorton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dedemorton/subscriptions","organizations_url":"https://api.github.com/users/dedemorton/orgs","repos_url":"https://api.github.com/users/dedemorton/repos","events_url":"https://api.github.com/users/dedemorton/events{/privacy}","received_events_url":"https://api.github.com/users/dedemorton/received_events","type":"User","site_admin":false},"repo":{"id":53439664,"name":"logstash","full_name":"dedemorton/logstash","owner":{"login":"dedemorton","id":14206422,"avatar_url":"https://avatars3.githubusercontent.com/u/14206422?v=4","gravatar_id":"","url":"https://api.github.com/users/dedemorton","html_url":"https://github.com/dedemorton","followers_url":"https://api.github.com/users/dedemorton/followers","following_url":"https://api.github.com/users/dedemorton/following{/other_user}","gists_url":"https://api.github.com/users/dedemorton/gists{/gist_id}","starred_url":"https://api.github.com/users/dedemorton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dedemorton/subscriptions","organizations_url":"https://api.github.com/users/dedemorton/orgs","repos_url":"https://api.github.com/users/dedemorton/repos","events_url":"https://api.github.com/users/dedemorton/events{/privacy}","received_events_url":"https://api.github.com/users/dedemorton/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/dedemorton/logstash","description":"logstash - transport and process your logs, events, or other data","fork":true,"url":"https://api.github.com/repos/dedemorton/logstash","forks_url":"https://api.github.com/repos/dedemorton/logstash/forks","keys_url":"https://api.github.com/repos/dedemorton/logstash/keys{/key_id}","collaborators_url":"https://api.github.com/repos/dedemorton/logstash/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/dedemorton/logstash/teams","hooks_url":"https://api.github.com/repos/dedemorton/logstash/hooks","issue_events_url":"https://api.github.com/repos/dedemorton/logstash/issues/events{/number}","events_url":"https://api.github.com/repos/dedemorton/logstash/events","assignees_url":"https://api.github.com/repos/dedemorton/logstash/assignees{/user}","branches_url":"https://api.github.com/repos/dedemorton/logstash/branches{/branch}","tags_url":"https://api.github.com/repos/dedemorton/logstash/tags","blobs_url":"https://api.github.com/repos/dedemorton/logstash/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/dedemorton/logstash/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/dedemorton/logstash/git/refs{/sha}","trees_url":"https://api.github.com/repos/dedemorton/logstash/git/trees{/sha}","statuses_url":"https://api.github.com/repos/dedemorton/logstash/statuses/{sha}","languages_url":"https://api.github.com/repos/dedemorton/logstash/languages","stargazers_url":"https://api.github.com/repos/dedemorton/logstash/stargazers","contributors_url":"https://api.github.com/repos/dedemorton/logstash/contributors","subscribers_url":"https://api.github.com/repos/dedemorton/logstash/subscribers","subscription_url":"https://api.github.com/repos/dedemorton/logstash/subscription","commits_url":"https://api.github.com/repos/dedemorton/logstash/commits{/sha}","git_commits_url":"https://api.github.com/repos/dedemorton/logstash/git/commits{/sha}","comments_url":"https://api.github.com/repos/dedemorton/logstash/comments{/number}","issue_comment_url":"https://api.github.com/repos/dedemorton/logstash/issues/comments{/number}","contents_url":"https://api.github.com/repos/dedemorton/logstash/contents/{+path}","compare_url":"https://api.github.com/repos/dedemorton/logstash/compare/{base}...{head}","merges_url":"https://api.github.com/repos/dedemorton/logstash/merges","archive_url":"https://api.github.com/repos/dedemorton/logstash/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/dedemorton/logstash/downloads","issues_url":"https://api.github.com/repos/dedemorton/logstash/issues{/number}","pulls_url":"https://api.github.com/repos/dedemorton/logstash/pulls{/number}","milestones_url":"https://api.github.com/repos/dedemorton/logstash/milestones{/number}","notifications_url":"https://api.github.com/repos/dedemorton/logstash/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/dedemorton/logstash/labels{/name}","releases_url":"https://api.github.com/repos/dedemorton/logstash/releases{/id}","deployments_url":"https://api.github.com/repos/dedemorton/logstash/deployments","created_at":"2016-03-08T19:36:40Z","updated_at":"2016-03-08T19:36:42Z","pushed_at":"2017-08-24T01:14:43Z","git_url":"git://github.com/dedemorton/logstash.git","ssh_url":"git@github.com:dedemorton/logstash.git","clone_url":"https://github.com/dedemorton/logstash.git","svn_url":"https://github.com/dedemorton/logstash","homepage":"https://www.elastic.co/products/logstash","size":92079,"stargazers_count":0,"watchers_count":0,"language":"Ruby","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"elastic:master","ref":"master","sha":"976e918d216ab8e3b47961cb4a09c887a8f99763","user":{"login":"elastic","id":6764390,"avatar_url":"https://avatars0.githubusercontent.com/u/6764390?v=4","gravatar_id":"","url":"https://api.github.com/users/elastic","html_url":"https://github.com/elastic","followers_url":"https://api.github.com/users/elastic/followers","following_url":"https://api.github.com/users/elastic/following{/other_user}","gists_url":"https://api.github.com/users/elastic/gists{/gist_id}","starred_url":"https://api.github.com/users/elastic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/elastic/subscriptions","organizations_url":"https://api.github.com/users/elastic/orgs","repos_url":"https://api.github.com/users/elastic/repos","events_url":"https://api.github.com/users/elastic/events{/privacy}","received_events_url":"https://api.github.com/users/elastic/received_events","type":"Organization","site_admin":false},"repo":{"id":1090311,"name":"logstash","full_name":"elastic/logstash","owner":{"login":"elastic","id":6764390,"avatar_url":"https://avatars0.githubusercontent.com/u/6764390?v=4","gravatar_id":"","url":"https://api.github.com/users/elastic","html_url":"https://github.com/elastic","followers_url":"https://api.github.com/users/elastic/followers","following_url":"https://api.github.com/users/elastic/following{/other_user}","gists_url":"https://api.github.com/users/elastic/gists{/gist_id}","starred_url":"https://api.github.com/users/elastic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/elastic/subscriptions","organizations_url":"https://api.github.com/users/elastic/orgs","repos_url":"https://api.github.com/users/elastic/repos","events_url":"https://api.github.com/users/elastic/events{/privacy}","received_events_url":"https://api.github.com/users/elastic/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/elastic/logstash","description":"Logstash - transport and process your logs, events, or other data","fork":false,"url":"https://api.github.com/repos/elastic/logstash","forks_url":"https://api.github.com/repos/elastic/logstash/forks","keys_url":"https://api.github.com/repos/elastic/logstash/keys{/key_id}","collaborators_url":"https://api.github.com/repos/elastic/logstash/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/elastic/logstash/teams","hooks_url":"https://api.github.com/repos/elastic/logstash/hooks","issue_events_url":"https://api.github.com/repos/elastic/logstash/issues/events{/number}","events_url":"https://api.github.com/repos/elastic/logstash/events","assignees_url":"https://api.github.com/repos/elastic/logstash/assignees{/user}","branches_url":"https://api.github.com/repos/elastic/logstash/branches{/branch}","tags_url":"https://api.github.com/repos/elastic/logstash/tags","blobs_url":"https://api.github.com/repos/elastic/logstash/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/elastic/logstash/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/elastic/logstash/git/refs{/sha}","trees_url":"https://api.github.com/repos/elastic/logstash/git/trees{/sha}","statuses_url":"https://api.github.com/repos/elastic/logstash/statuses/{sha}","languages_url":"https://api.github.com/repos/elastic/logstash/languages","stargazers_url":"https://api.github.com/repos/elastic/logstash/stargazers","contributors_url":"https://api.github.com/repos/elastic/logstash/contributors","subscribers_url":"https://api.github.com/repos/elastic/logstash/subscribers","subscription_url":"https://api.github.com/repos/elastic/logstash/subscription","commits_url":"https://api.github.com/repos/elastic/logstash/commits{/sha}","git_commits_url":"https://api.github.com/repos/elastic/logstash/git/commits{/sha}","comments_url":"https://api.github.com/repos/elastic/logstash/comments{/number}","issue_comment_url":"https://api.github.com/repos/elastic/logstash/issues/comments{/number}","contents_url":"https://api.github.com/repos/elastic/logstash/contents/{+path}","compare_url":"https://api.github.com/repos/elastic/logstash/compare/{base}...{head}","merges_url":"https://api.github.com/repos/elastic/logstash/merges","archive_url":"https://api.github.com/repos/elastic/logstash/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/elastic/logstash/downloads","issues_url":"https://api.github.com/repos/elastic/logstash/issues{/number}","pulls_url":"https://api.github.com/repos/elastic/logstash/pulls{/number}","milestones_url":"https://api.github.com/repos/elastic/logstash/milestones{/number}","notifications_url":"https://api.github.com/repos/elastic/logstash/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/elastic/logstash/labels{/name}","releases_url":"https://api.github.com/repos/elastic/logstash/releases{/id}","deployments_url":"https://api.github.com/repos/elastic/logstash/deployments","created_at":"2010-11-18T01:31:50Z","updated_at":"2017-08-24T02:45:37Z","pushed_at":"2017-08-24T08:23:57Z","git_url":"git://github.com/elastic/logstash.git","ssh_url":"git@github.com:elastic/logstash.git","clone_url":"https://github.com/elastic/logstash.git","svn_url":"https://github.com/elastic/logstash","homepage":"https://www.elastic.co/products/logstash","size":92102,"stargazers_count":7885,"watchers_count":7885,"language":"Ruby","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":2226,"mirror_url":null,"open_issues_count":959,"forks":2226,"open_issues":959,"watchers":7885,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/elastic/logstash/pulls/8063"},"html":{"href":"https://github.com/elastic/logstash/pull/8063"},"issue":{"href":"https://api.github.com/repos/elastic/logstash/issues/8063"},"comments":{"href":"https://api.github.com/repos/elastic/logstash/issues/8063/comments"},"review_comments":{"href":"https://api.github.com/repos/elastic/logstash/pulls/8063/comments"},"review_comment":{"href":"https://api.github.com/repos/elastic/logstash/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/elastic/logstash/pulls/8063/commits"},"statuses":{"href":"https://api.github.com/repos/elastic/logstash/statuses/68f40b1de164465a8d74937a1547520f8fb156eb"}}}}
{"actor":{"display_login":"acchen97"}}