AlexanderMannsfeld0007

I see - is there any chance for a generic parameter to enforce return-code 0?

Hi, exactly! Regular, either the parent OrganizationUnit or tagging on the accounts itself is used for a lot of aggregation / clusterization (and in our management-accounts also for a lot...

Hi, meanwhile we came a bit further - unfortunately not a state I would propose as a pull-request .. but: We added another bucket for the orga-metadata (actually we dumped...

Minor update, I discovered that "index.max_docvalue_fields_search" was set a bit to low and therefor limited to much the indexed fields in the index-patterns log-* log-aws-* .. I set it a...

Hi, finally everything has come together. Every event is enriched with some meta-data from our AWS organizations and stable indexed. We now have an setup allowing us based on AzureAD-groups...