AI Slop Code Risk Monitor

elastic/beats

SlopCodeMonitor badge for elastic/beats Adjusted legacy signal; badge bands: 25 / 50 / 75 (different from dashboard bands).

:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash

3.3 Low pattern signal View on GitHub

Open-Source Code Quality, Security and Technical Debt Review

This report summarizes scanner evidence for elastic/beats, a Go project with 12,649 GitHub stars. SynthScan examined 2,511,955 lines of code across 14089 source files, recording 8061 pattern matches distributed across 20 syntactic categories. The legacy adjusted pattern signal is 3.3 (Low pattern signal); it is not an authorship estimate.

Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.

3.3
Adjusted Signal
3.3
Raw Pattern Score
100%
Time Factor
2026-10-31
Last Push
12.6K
Stars
Go
Language
2.5M
Lines of Code
14.1K
Files
8.1K
Pattern Hits
2026-10-31
Scan Date
0.01
HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 11.9/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 7095 finding(s).

Hallucinated Dependency & Supply Chain Risk 3.1/100 · LOW

Are imports declared and package/API names verified? 912 finding(s).

Agent Over-Engineering Ratio 0.7/100 · LOW

Are wrappers, guards, and repeated structures necessary? 235 finding(s).

PR Review Velocity Impact 16.4/100 · LOW

Which changes need focused human review? 8061 finding(s).

What These Metrics Mean

Adjusted Signal
Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score
Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor
A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits
Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate
High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files
Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 66HIGH 23MEDIUM 104LOW 7868

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 8061 distinct pattern matches across 20 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Over-Commented Block6733 hits · 5832 pts
SeverityFileLineSnippetContext
LOWmagefile.go1// Licensed to Elasticsearch B.V. under one or more contributorCOMMENT
LOWtools/tools.go1// Licensed to Elasticsearch B.V. under one or more contributorCOMMENT
LOWlicenses/ELASTIC-LICENSE-2.0-header.txt1// Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under oneCOMMENT
LOWlicenses/ELASTIC-LICENSE-header.txt1// Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under oneCOMMENT
LOWlicenses/license_header.go1// Licensed to Elasticsearch B.V. under one or more contributorCOMMENT
LOWlicenses/license_header.go21COMMENT
LOWlicenses/license.go1// Licensed to Elasticsearch B.V. under one or more contributorCOMMENT
LOWlicenses/APACHE-LICENSE-2.0-header.txt1// Licensed to Elasticsearch B.V. under one or more contributorCOMMENT
LOW…1780480871-heartbeat-synthetics-apm-crosslink-env.yaml1# Kind can be one of:COMMENT
LOW…ragments/1791570000-heartbeat-named-secret-stores.yaml1# REQUIREDCOMMENT
LOW…ragments/1791570000-heartbeat-named-secret-stores.yaml21description: >COMMENT
LOW…nts/1787591085-heartbeat-receiver-scheduler-group.yaml1# Kind can be one of:COMMENT
LOW…099380-fix-winlogbeat-powershell-parameterbinding.yaml1# REQUIREDCOMMENT
LOW…099380-fix-winlogbeat-powershell-parameterbinding.yaml41# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added.COMMENT
LOW…39-fix-lock-inversion-in-the-otel-registry-bridge.yaml1# REQUIREDCOMMENT
LOW…39-fix-lock-inversion-in-the-otel-registry-bridge.yaml41# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number.COMMENT
LOW…lowed_hosts-to-heartbeat-secret-store-connections.yaml1# REQUIREDCOMMENT
LOW…lowed_hosts-to-heartbeat-secret-store-connections.yaml41# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number.COMMENT
LOW…/1785500000-filestream-shared-harvester-scheduler.yaml1# Kind can be one of:COMMENT
LOW…/1785500000-filestream-shared-harvester-scheduler.yaml21component: filebeatCOMMENT
LOW…ents/1782129391-filestream-optimize-file-scanning.yaml1# Kind can be one of:COMMENT
LOW…og/fragments/1791521396-pgsql-null-column-datarow.yaml1# Kind can be one of:COMMENT
LOW…log/fragments/1792643522-okta-minimal-scratch-dir.yaml1# REQUIREDCOMMENT
LOW…log/fragments/1792643522-okta-minimal-scratch-dir.yaml41# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added.COMMENT
LOW…1784567309-filestream-multiline-timeout-goroutine.yaml1# Kind can be one of:COMMENT
LOW…ts/1788982248-filestream-cache-directory-listings.yaml1# Kind can be one of:COMMENT
LOW…ments/1793193287-fix-synthexec-start-failure-leak.yaml1# REQUIREDCOMMENT
LOW…ments/1793193287-fix-synthexec-start-failure-leak.yaml21# description:COMMENT
LOW…ments/1793193287-fix-synthexec-start-failure-leak.yaml41# AUTOMATEDCOMMENT
LOWchangelog/fragments/1791837294-update-go-to-1.26.9.yaml1# REQUIREDCOMMENT
LOWchangelog/fragments/1791837294-update-go-to-1.26.9.yaml21# description:COMMENT
LOWchangelog/fragments/1791837294-update-go-to-1.26.9.yaml41# AUTOMATEDCOMMENT
LOW…s/1783332050-filestream-fd-exhaustion-no-reingest.yaml1# Kind can be one of:COMMENT
LOW…/fragments/1791967689-linereader-spin-after-close.yaml1# REQUIREDCOMMENT
LOW…/fragments/1791967689-linereader-spin-after-close.yaml21# description:COMMENT
LOW…/fragments/1791967689-linereader-spin-after-close.yaml41# AUTOMATEDCOMMENT
LOW…rve-literal-dotted-keys-in-browser-monitor-params.yaml1# REQUIREDCOMMENT
LOW…rve-literal-dotted-keys-in-browser-monitor-params.yaml21# description:COMMENT
LOW…rve-literal-dotted-keys-in-browser-monitor-params.yaml41# pr: https://github.com/owner/repo/1234COMMENT
LOW…gments/1781543752-filestream-park-idle-harvesters.yaml1# Kind can be one of:COMMENT
LOW…gments/1781543752-filestream-park-idle-harvesters.yaml21component: filebeatCOMMENT
LOW…gments/1787349887-input-cursor-shared-state-store.yaml1# Kind can be one of:COMMENT
LOW…agments/1792776648-logstash-exporter-fifo-enqueue.yaml1# Kind can be one of:COMMENT
LOW…305201-update-github.com-apache-thrift-to-v0.25.0.yaml1# REQUIREDCOMMENT
LOW…305201-update-github.com-apache-thrift-to-v0.25.0.yaml21# description:COMMENT
LOW…305201-update-github.com-apache-thrift-to-v0.25.0.yaml41# AUTOMATEDCOMMENT
LOW…7256-fix-malformed-synthetics-runner-log-messages.yaml1# REQUIREDCOMMENT
LOW…7256-fix-malformed-synthetics-runner-log-messages.yaml21# description:COMMENT
LOW…7256-fix-malformed-synthetics-runner-log-messages.yaml41# AUTOMATEDCOMMENT
LOW…og/fragments/1792574798-autoops-es-min-search-vcu.yaml1# REQUIREDCOMMENT
LOW…og/fragments/1792574798-autoops-es-min-search-vcu.yaml21# description:COMMENT
LOW…og/fragments/1792574798-autoops-es-min-search-vcu.yaml41# AUTOMATEDCOMMENT
LOW…ragments/1792532859-bound-osquery-outage-recovery.yaml1# REQUIREDCOMMENT
LOW…ragments/1792532859-bound-osquery-outage-recovery.yaml21# description:COMMENT
LOW…ragments/1792532859-bound-osquery-outage-recovery.yaml41# AUTOMATEDCOMMENT
LOW…e-identically-configured-processors-across-inputs.yaml1# REQUIREDCOMMENT
LOW…e-identically-configured-processors-across-inputs.yaml21description: >COMMENT
LOW…angelog/fragments/1784889342-remove-system-hostfs.yaml1# REQUIREDCOMMENT
LOW…angelog/fragments/1784889342-remove-system-hostfs.yaml21# description:COMMENT
LOW…angelog/fragments/1784889342-remove-system-hostfs.yaml41# AUTOMATEDCOMMENT
6673 more matches not shown…
Hallucination Indicators66 hits · 890 pts
SeverityFileLineSnippetContext
CRITICALfilebeat/module/logstash/log/ingest/pipeline-json.yml40 ctx.logstash.log.log_event.action.forEach(v -> {CODE
CRITICAL⚡…/elasticsearch/server/test/test-json.log-expected.json997 "at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) [randomizedCODE
CRITICAL⚡…/elasticsearch/server/test/test-json.log-expected.json998 "at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) [randomizedCODE
CRITICAL⚡…/elasticsearch/server/test/test-json.log-expected.json999 "at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) [randomizedCODE
CRITICAL⚡…/elasticsearch/server/test/test-json.log-expected.json1000 "at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) [randomizedCODE
CRITICAL⚡…/elasticsearch/server/test/test-json.log-expected.json1001 "at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) [randomizedCODE
CRITICAL⚡…/elasticsearch/server/test/test-json.log-expected.json1002 "at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) [randomizedCODE
CRITICAL…/elasticsearch/server/test/test-json.log-expected.json1019 "at org.elasticsearch.common.logging.JsonLoggerTests.testJsonInStacktraceMessageIsSplitted(JsonLoggerTests.jCODE
CRITICAL⚡…/elasticsearch/server/test/test-json.log-expected.json1077 "at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) [randomizedCODE
CRITICAL⚡…/elasticsearch/server/test/test-json.log-expected.json1078 "at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) [randomizedCODE
CRITICAL⚡…/elasticsearch/server/test/test-json.log-expected.json1079 "at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) [randomizedCODE
CRITICAL⚡…/elasticsearch/server/test/test-json.log-expected.json1080 "at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) [randomizedCODE
CRITICAL⚡…/elasticsearch/server/test/test-json.log-expected.json1081 "at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) [randomizedCODE
CRITICAL⚡…/elasticsearch/server/test/test-json.log-expected.json1082 "at com.carrotsearch.randomizedtesting.rules.StatementAdapter.evaluate(StatementAdapter.java:36) [randomizedCODE
CRITICAL…/elasticsearch/server/test/test-json.log-expected.json1099 "at org.elasticsearch.common.logging.JsonLoggerTests.testStacktrace(JsonLoggerTests.java:125) [test/:?]",CODE
CRITICAL…odule/elasticsearch/server/test/test.log-expected.json247 "message": "path: /_xpack/monitoring/_bulk, params: {system_id=logstash, system_api_version=2, interval=1s}\norgCODE
CRITICAL…odule/elasticsearch/server/test/test.log-expected.json345 "message": "monitoring execution failed\norg.elasticsearch.xpack.monitoring.exporter.ExportException: Exception CODE
CRITICALfilebeat/module/apache/access/ingest/pipeline.yml101 def parts = ctx.apache.access.ssl.protocol.toLowerCase().splitOnToken("v");CODE
CRITICAL⚡docs/reference/filebeat/multiline-examples.md54 at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver.concreteIndices(IndexNameExpressionResolver.java:1CODE
CRITICAL⚡docs/reference/filebeat/multiline-examples.md55 at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver.concreteIndices(IndexNameExpressionResolver.java:7CODE
CRITICAL⚡docs/reference/filebeat/multiline-examples.md56 at org.elasticsearch.action.admin.indices.delete.TransportDeleteIndexAction.checkBlock(TransportDeleteIndexAction.jaCODE
CRITICAL⚡libbeat/reader/parser/parser_test.go233 at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver.concreteIndices(IndexNameExpressionResolver.java:1CODE
CRITICAL⚡libbeat/reader/parser/parser_test.go234 at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver.concreteIndices(IndexNameExpressionResolver.java:7CODE
CRITICAL⚡libbeat/reader/parser/parser_test.go235 at org.elasticsearch.action.admin.indices.delete.TransportDeleteIndexAction.checkBlock(TransportDeleteIndexAction.jaCODE
CRITICAL⚡libbeat/reader/parser/parser_test.go238 at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver.concreteIndices(IndexNameExpressionResolver.java:1CODE
CRITICAL⚡libbeat/reader/parser/parser_test.go239 at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver.concreteIndices(IndexNameExpressionResolver.java:7CODE
CRITICAL⚡libbeat/reader/parser/parser_test.go240 at org.elasticsearch.action.admin.indices.delete.TransportDeleteIndexAction.checkBlock(TransportDeleteIndexAction.jaCODE
CRITICAL⚡libbeat/reader/parser/parser_test.go245 at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver.concreteIndices(IndexNameExpressionResolver.java:1CODE
CRITICAL⚡libbeat/reader/parser/parser_test.go246 at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver.concreteIndices(IndexNameExpressionResolver.java:7CODE
CRITICAL⚡libbeat/reader/parser/parser_test.go247 at org.elasticsearch.action.admin.indices.delete.TransportDeleteIndexAction.checkBlock(TransportDeleteIndexAction.jaCODE
CRITICAL⚡libbeat/reader/parser/parser_test.go251 at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver.concreteIndices(IndexNameExpressionResolver.java:1CODE
CRITICAL⚡libbeat/reader/parser/parser_test.go252 at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver.concreteIndices(IndexNameExpressionResolver.java:7CODE
CRITICAL⚡libbeat/reader/parser/parser_test.go253 at org.elasticsearch.action.admin.indices.delete.TransportDeleteIndexAction.checkBlock(TransportDeleteIndexAction.jaCODE
CRITICAL⚡libbeat/reader/parser/parser_test.go278<165>1 2003-08-24T05:14:15.000003-07:00 192.0.2.1 myproc 8710 - - at org.elasticsearch.cluster.metadata.IndexNameExpCODE
CRITICAL⚡libbeat/reader/parser/parser_test.go279<165>1 2003-08-24T05:14:15.000003-07:00 192.0.2.1 myproc 8710 - - at org.elasticsearch.cluster.metadata.IndexNameExpCODE
CRITICAL⚡libbeat/reader/parser/parser_test.go280<165>1 2003-08-24T05:14:15.000003-07:00 192.0.2.1 myproc 8710 - - at org.elasticsearch.action.admin.indices.delete.TCODE
CRITICAL⚡libbeat/reader/parser/parser_test.go284<165>1 2003-08-24T05:14:30.000003-07:00 192.0.2.1 myproc 8710 - - at org.elasticsearch.cluster.metadata.IndexNameExpCODE
CRITICAL⚡libbeat/reader/parser/parser_test.go285<165>1 2003-08-24T05:14:30.000003-07:00 192.0.2.1 myproc 8710 - - at org.elasticsearch.cluster.metadata.IndexNameExpCODE
CRITICAL⚡libbeat/reader/parser/parser_test.go286<165>1 2003-08-24T05:14:30.000003-07:00 192.0.2.1 myproc 8710 - - at org.elasticsearch.action.admin.indices.delete.TCODE
CRITICAL⚡libbeat/reader/parser/parser_test.go291 at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver.concreteIndices(IndexNameExpressionResolver.java:1CODE
CRITICAL⚡libbeat/reader/parser/parser_test.go292 at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver.concreteIndices(IndexNameExpressionResolver.java:7CODE
CRITICAL⚡libbeat/reader/parser/parser_test.go293 at org.elasticsearch.action.admin.indices.delete.TransportDeleteIndexAction.checkBlock(TransportDeleteIndexAction.jaCODE
CRITICAL⚡libbeat/reader/parser/parser_test.go299 at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver.concreteIndices(IndexNameExpressionResolver.java:1CODE
CRITICAL⚡libbeat/reader/parser/parser_test.go300 at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver.concreteIndices(IndexNameExpressionResolver.java:7CODE
CRITICAL⚡libbeat/reader/parser/parser_test.go301 at org.elasticsearch.action.admin.indices.delete.TransportDeleteIndexAction.checkBlock(TransportDeleteIndexAction.jaCODE
CRITICAL⚡libbeat/processors/dissect/dissect_test.go228 at org.apache.coyote.http11.Http11InputBuffer.parseRequestLine(Http11InputBuffer.java:426)CODE
CRITICAL⚡libbeat/processors/dissect/dissect_test.go229 at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:687)CODE
CRITICAL⚡libbeat/processors/dissect/dissect_test.go233 at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)CODE
CRITICAL⚡libbeat/processors/dissect/dissect_test.go250 at org.apache.coyote.http11.Http11InputBuffer.parseRequestLine(Http11InputBuffer.java:426)CODE
CRITICAL⚡libbeat/processors/dissect/dissect_test.go251 at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:687)CODE
CRITICAL⚡libbeat/processors/dissect/dissect_test.go255 at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)CODE
CRITICAL⚡libbeat/processors/dissect/dissect_test.go307 at org.apache.coyote.http11.Http11InputBuffer.parseRequestLine(Http11InputBuffer.java:426)CODE
CRITICAL⚡libbeat/processors/dissect/dissect_test.go308 at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:687)CODE
CRITICAL⚡libbeat/processors/dissect/dissect_test.go312 at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)CODE
CRITICALlibbeat/processors/dissect/testdata/dissect_tests.json18 "msg": "18-Apr-2018 06:53:20.411 INFO [http-nio-8080-exec-1] org.apache.coyote.http11.Http11Processor.service Error paCODE
CRITICALlibbeat/processors/dissect/testdata/dissect_tests.json22 "message": "Error parsing HTTP request header\n Note: further occurrences of HTTP header parsing errors will be loggeCODE
CRITICALx-pack/filebeat/input/awss3/v2_processor.go413 event.SetID(fmt.Sprintf("%d-%s-%012d", b.obj.S3.Object.LastModified.UnixNano(), b.hash, offset))CODE
CRITICAL…at/module/activemq/log/test/activemq.log-expected.json73 "activemq.log.stack_trace": "at org.apache.activemq.util.IOExceptionSupport.create(IOExceptionSupport.java:28)[aCODE
CRITICAL…filebeat/module/azure/activitylogs/ingest/pipeline.yml229 for (String key : ctx.azure.activitylogs.identity.claims.keySet()) {CODE
CRITICAL…filebeat/module/azure/activitylogs/ingest/pipeline.yml230 ctx.temp_claims[key.replace('.', '_')] = ctx.azure.activitylogs.identity.claims.get(key);CODE
6 more matches not shown…
Fake / Example Data673 hits · 512 pts
SeverityFileLineSnippetContext
LOW…search/cluster_stats/_meta/test/cluster_state.710.json7124 "placeholder": {CODE
LOW…sticsearch/index/_meta/test/cluster_state.7.17.27.json6341 "placeholder" : {CODE
LOWdocs/reference/filebeat/filebeat-input-httpjson.md1433 Note that since `request.url` must be a valid URL, if an API returns complete URLs in place of an identifier as in tCODE
LOWdocs/reference/filebeat/filebeat-input-httpjson.md1681 Note that since `request.url` must be a valid URL, if an API returns complete URLs in place of an identifier as in tCODE
LOW⚡…reference/filebeat/filebeat-module-google_workspace.md70 var.delegated_account: "user@example.com"CODE
LOW⚡…reference/filebeat/filebeat-module-google_workspace.md74 var.delegated_account: "user@example.com"CODE
LOW⚡…reference/filebeat/filebeat-module-google_workspace.md78 var.delegated_account: "user@example.com"CODE
LOW⚡…reference/filebeat/filebeat-module-google_workspace.md82 var.delegated_account: "user@example.com"CODE
LOW⚡…reference/filebeat/filebeat-module-google_workspace.md86 var.delegated_account: "user@example.com"CODE
LOW⚡…reference/filebeat/filebeat-module-google_workspace.md90 var.delegated_account: "user@example.com"CODE
LOWdocs/reference/libbeat/config-file-format.md47person: {name: "John Doe", age: 34, country: "Canada"}CODE
LOWlibbeat/processors/dissect/testdata/dissect_tests.json180 "name": "Jane Doe",CODE
LOW…rocessors/add_cloud_metadata/provider_azure_vm_test.go133 return azcore.AccessToken{Token: "fake_token", ExpiresOn: time.Now().Add(24 * time.Hour)}, nilCODE
LOW…processors/add_host_metadata/add_host_metadata_test.go779 hostname := "placeholder"CODE
LOWlibbeat/common/match/matcher_bench_test.go44var mixedContent = makeContent("mixed", `Lorem ipsum dolor sit amet,CODE
LOWlibbeat/common/match/matcher_bench_test.go44var mixedContent = makeContent("mixed", `Lorem ipsum dolor sit amet,CODE
LOWlibbeat/common/match/matcher_bench_test.go60var logContent = makeContent("simple_log", `23-08-2016 15:10:01 - Lorem ipsum dolor sit amet,CODE
LOWlibbeat/common/match/matcher_bench_test.go60var logContent = makeContent("simple_log", `23-08-2016 15:10:01 - Lorem ipsum dolor sit amet,CODE
LOWlibbeat/common/match/matcher_bench_test.go73var logContent2 = makeContent("simple_log2", `2016-08-23 15:10:01 - DEBUG - Lorem ipsum dolor sit amet,CODE
LOWlibbeat/common/match/matcher_bench_test.go73var logContent2 = makeContent("simple_log2", `2016-08-23 15:10:01 - DEBUG - Lorem ipsum dolor sit amet,CODE
LOWlibbeat/common/match/matcher_bench_test.go85var logContentLevel = makeContent("simple_log_with_level", `DEBUG - 2016-08-23 15:10:01 - Lorem ipsum dolor sit amet,CODE
LOWlibbeat/common/match/matcher_bench_test.go85var logContentLevel = makeContent("simple_log_with_level", `DEBUG - 2016-08-23 15:10:01 - Lorem ipsum dolor sit amet,CODE
LOWx-pack/filebeat/input/gcppubsub/testdata/fake.json6 "client_email": "foo@bar.com",CODE
LOWx-pack/filebeat/input/httpjson/config_test.go509 "client_email": "foo@bar.com",CODE
LOWx-pack/filebeat/input/httpjson/config_test.go524 "client_email": "foo@bar.com",CODE
LOW…pack/filebeat/input/httpjson/testdata/credentials.json5 "client_email": "foo@bar.com",CODE
LOW…ilebeat/input/salesforce/live_activity_helpers_test.go1339 keySalesforceUsername: "user@example.com",CODE
LOW…ilebeat/input/salesforce/live_activity_helpers_test.go1351 assert.Equal(t, "user@example.com", creds.Username)CODE
LOW…ilebeat/input/salesforce/live_activity_helpers_test.go1427 assert.Equal(t, "user@example.com", creds.Username)CODE
LOW…ilebeat/input/salesforce/live_activity_helpers_test.go1438 keySalesforceUsername: "'user@example.com'",CODE
LOW…ilebeat/input/salesforce/live_activity_helpers_test.go1450 assert.Equal(t, "user@example.com", creds.Username)CODE
LOWx-pack/filebeat/input/cel/config_test.go689 "client_email": "foo@bar.com",CODE
LOWx-pack/filebeat/input/cel/config_test.go704 "client_email": "foo@bar.com",CODE
LOWx-pack/filebeat/input/cel/testdata/credentials.json5 "client_email": "foo@bar.com",CODE
LOW…dule/o365/audit/test/13-dlp-exchange.log-expected.json6 "asr@example.org"CODE
LOW…dule/o365/audit/test/13-dlp-exchange.log-expected.json36 "asr@example.org"CODE
LOW…dule/o365/audit/test/13-dlp-exchange.log-expected.json155 "asr@example.org"CODE
LOW…dule/o365/audit/test/13-dlp-exchange.log-expected.json185 "asr@example.org"CODE
LOW…dule/o365/audit/test/13-dlp-exchange.log-expected.json304 "asr@example.org"CODE
LOW…dule/o365/audit/test/13-dlp-exchange.log-expected.json335 "asr@example.org"CODE
LOW…dule/o365/audit/test/13-dlp-exchange.log-expected.json454 "asr@example.org"CODE
LOW…dule/o365/audit/test/13-dlp-exchange.log-expected.json485 "asr@example.org"CODE
LOW…dule/o365/audit/test/13-dlp-exchange.log-expected.json604 "asr@example.org"CODE
LOW…dule/o365/audit/test/13-dlp-exchange.log-expected.json634 "asr@example.org"CODE
LOW…ccounts/test/user_accounts-test.json.log-expected.json40 "source.user.email": "foo@bar.com",CODE
LOW…ccounts/test/user_accounts-test.json.log-expected.json88 "source.user.email": "foo@bar.com",CODE
LOW…ccounts/test/user_accounts-test.json.log-expected.json136 "source.user.email": "foo@bar.com",CODE
LOW…ccounts/test/user_accounts-test.json.log-expected.json184 "source.user.email": "foo@bar.com",CODE
LOW…ccounts/test/user_accounts-test.json.log-expected.json232 "source.user.email": "foo@bar.com",CODE
LOW…ccounts/test/user_accounts-test.json.log-expected.json280 "source.user.email": "foo@bar.com",CODE
LOW…ccounts/test/user_accounts-test.json.log-expected.json328 "source.user.email": "foo@bar.com",CODE
LOW…ccounts/test/user_accounts-test.json.log-expected.json376 "source.user.email": "foo@bar.com",CODE
LOW…/admin/test/admin-calendar-test.json.log-expected.json41 "source.user.email": "foo@bar.com",CODE
LOW…/admin/test/admin-calendar-test.json.log-expected.json90 "source.user.email": "foo@bar.com",CODE
LOW…/admin/test/admin-calendar-test.json.log-expected.json142 "source.user.email": "foo@bar.com",CODE
LOW…/admin/test/admin-calendar-test.json.log-expected.json191 "source.user.email": "foo@bar.com",CODE
LOW…/admin/test/admin-calendar-test.json.log-expected.json240 "source.user.email": "foo@bar.com",CODE
LOW…/admin/test/admin-calendar-test.json.log-expected.json289 "source.user.email": "foo@bar.com",CODE
LOW…/admin/test/admin-calendar-test.json.log-expected.json338 "source.user.email": "foo@bar.com",CODE
LOW…/admin/test/admin-calendar-test.json.log-expected.json391 "source.user.email": "foo@bar.com",CODE
613 more matches not shown…
Unused Imports170 hits · 170 pts
SeverityFileLineSnippetContext
LOWmetricbeat/module/postgresql/test_postgresql.py4CODE
LOWmetricbeat/module/openmetrics/test_openmetrics.py2CODE
LOWmetricbeat/module/openmetrics/test_openmetrics.py3CODE
LOWmetricbeat/module/docker/test_docker.py2CODE
LOWmetricbeat/module/docker/test_docker.py3CODE
LOWmetricbeat/module/couchdb/test_couchdb.py2CODE
LOWmetricbeat/module/couchdb/test_couchdb.py3CODE
LOWmetricbeat/module/vsphere/test_vsphere.py2CODE
LOWmetricbeat/module/vsphere/test_vsphere.py3CODE
LOWmetricbeat/module/kibana/test_kibana.py5CODE
LOWmetricbeat/module/php_fpm/test_phpfpm.py2CODE
LOWmetricbeat/module/php_fpm/test_phpfpm.py3CODE
LOWmetricbeat/module/logstash/test_logstash.py3CODE
LOWmetricbeat/module/logstash/test_logstash.py5CODE
LOWmetricbeat/module/logstash/test_logstash.py6CODE
LOWmetricbeat/module/redis/test_redis.py2CODE
LOWmetricbeat/module/redis/test_redis.py5CODE
LOWmetricbeat/module/golang/test_golang.py2CODE
LOWmetricbeat/module/golang/test_golang.py4CODE
LOWmetricbeat/module/ceph/test_ceph.py2CODE
LOWmetricbeat/module/ceph/test_ceph.py4CODE
LOWmetricbeat/module/ceph/test_ceph.py5CODE
LOWmetricbeat/module/beat/test_beat.py1CODE
LOWmetricbeat/module/beat/test_beat.py4CODE
LOWmetricbeat/module/beat/test_beat.py6CODE
LOWmetricbeat/module/munin/test_munin.py2CODE
LOWmetricbeat/module/munin/test_munin.py3CODE
LOWmetricbeat/module/jolokia/test_jolokia.py2CODE
LOWmetricbeat/module/jolokia/test_jolokia.py3CODE
LOWmetricbeat/module/mongodb/test_mongodb.py2CODE
LOWmetricbeat/module/mongodb/test_mongodb.py4CODE
LOWmetricbeat/module/zookeeper/test_zookeeper.py2CODE
LOWmetricbeat/module/zookeeper/test_zookeeper.py4CODE
LOWmetricbeat/module/memcached/test_memcached.py2CODE
LOWmetricbeat/module/memcached/test_memcached.py3CODE
LOWmetricbeat/module/consul/test_consul.py2CODE
LOWmetricbeat/module/consul/test_consul.py4CODE
LOWmetricbeat/module/http/test_http.py2CODE
LOWmetricbeat/module/http/test_http.py4CODE
LOWmetricbeat/module/http/test_http.py5CODE
LOWmetricbeat/module/kafka/test_kafka.py2CODE
LOWmetricbeat/module/kafka/test_kafka.py3CODE
LOWmetricbeat/module/aerospike/test_aerospike.py2CODE
LOWmetricbeat/module/aerospike/test_aerospike.py3CODE
LOWmetricbeat/module/mysql/test_mysql.py2CODE
LOWmetricbeat/module/mysql/test_mysql.py4CODE
LOWmetricbeat/module/etcd/test_etcd.py2CODE
LOWmetricbeat/module/etcd/test_etcd.py3CODE
LOWmetricbeat/module/etcd/test_etcd.py4CODE
LOWmetricbeat/module/envoyproxy/test_envoyproxy.py2CODE
LOWmetricbeat/module/envoyproxy/test_envoyproxy.py3CODE
LOWmetricbeat/module/prometheus/test_prometheus.py2CODE
LOWmetricbeat/module/prometheus/test_prometheus.py3CODE
LOWmetricbeat/module/uwsgi/test_uwsgi.py3CODE
LOWmetricbeat/module/uwsgi/test_uwsgi.py5CODE
LOWmetricbeat/module/dropwizard/test_dropwizard.py2CODE
LOWmetricbeat/module/dropwizard/test_dropwizard.py3CODE
LOWmetricbeat/module/apache/test_apache.py2CODE
LOWmetricbeat/module/apache/test_apache.py5CODE
LOWmetricbeat/module/traefik/test_traefik.py2CODE
110 more matches not shown…
Hyper-Verbose Identifiers181 hits · 166 pts
SeverityFileLineSnippetContext
LOWmetricbeat/module/ceph/test_ceph.py69 def get_ceph_mgr_module_config(self, metricset):CODE
LOWmetricbeat/module/elasticsearch/test_elasticsearch.py223 def create_ccr_follower_index(self):CODE
LOWmetricbeat/module/elasticsearch/test_elasticsearch.py249 def create_enrich_source_index(self):CODE
LOWmetricbeat/module/elasticsearch/test_elasticsearch.py274 def create_enrich_ingest_pipeline(self):CODE
LOWmetricbeat/module/elasticsearch/test_elasticsearch.py302 def delete_enrich_ingest_pipeline(self):CODE
LOWmetricbeat/tests/system/test_processors.py53 def test_dropfields_with_condition(self):CODE
LOWmetricbeat/tests/system/test_processors.py90 def test_dropevent_with_condition(self):CODE
LOWmetricbeat/tests/system/test_processors.py130 def test_dropevent_with_complex_condition(self):CODE
LOWmetricbeat/tests/system/test_processors.py251 def test_contradictory_multiple_actions(self):CODE
LOWmetricbeat/tests/system/test_cmd.py127 def test_modules_test_with_module_in_main_config(self):CODE
LOWmetricbeat/tests/system/test_cmd.py166 def test_modules_test_filter_no_result(self):CODE
LOWmetricbeat/tests/system/metricbeat.py69 def assert_fields_for_platform(self, good_fields: object, written_fields: object):CODE
LOWmetricbeat/tests/system/metricbeat.py81 def assert_no_logged_warnings(self, replace=None):CODE
LOWmetricbeat/tests/system/metricbeat.py165def parameterized_with_supported_versions(base_class):CODE
LOWmetricbeat/tests/system/test_reload.py96 def test_wrong_module_no_reload(self):STRING
LOWfilebeat/conftest.py31def pytest_collection_modifyitems(config, items):CODE
LOW⚡filebeat/tests/system/test_unix.py19 def test_unix_with_newline_delimiter(self):CODE
LOW⚡filebeat/tests/system/test_unix.py25 def test_unix_with_custom_char_delimiter(self):CODE
LOW⚡filebeat/tests/system/test_unix.py31 def test_unix_with_custom_word_delimiter(self):CODE
LOW⚡filebeat/tests/system/test_unix.py37 def send_events_with_delimiter(self, delimiter):CODE
LOWfilebeat/tests/system/test_unix.py77 def test_unix_datagram_socket(self):STRING
LOWfilebeat/tests/system/test_processors.py44 def test_dissect_good_tokenizer(self):CODE
LOWfilebeat/tests/system/test_processors.py94 def test_dissect_bad_tokenizer(self):CODE
LOWfilebeat/tests/system/test_processors.py175 def test_decode_csv_fields_defaults(self):CODE
LOWfilebeat/tests/system/test_processors.py200 def test_decode_csv_fields_all_options(self):CODE
LOWfilebeat/tests/system/test_processors.py252 def test_javascript_processor_add_host_metadata(self):CODE
LOWfilebeat/tests/system/test_processors.py269 def _test_javascript_processor_with_source(self, script_source):STRING
LOWfilebeat/tests/system/test_processors.py288 def _init_and_read_test_input(self, input_lines):STRING
LOWfilebeat/tests/system/test_index_pattern.py8 def test_export_index_pattern(self):CODE
LOWfilebeat/tests/system/test_index_pattern.py21 def test_export_index_pattern_migration(self):CODE
LOWfilebeat/tests/system/test_setup.py26 def test_setup_modules_d_config(self):CODE
LOWfilebeat/tests/system/test_reload_modules.py72 def test_reload_writes_pipeline(self):STRING
LOWfilebeat/tests/system/test_reload_modules.py220 def test_wrong_module_no_reload(self):STRING
LOWfilebeat/tests/system/test_input.py17 def test_rotating_close_inactive_larger_write_rate(self):CODE
LOWfilebeat/tests/system/test_input.py72 def test_close_inactive_file_removal(self):CODE
LOWfilebeat/tests/system/test_input.py115 def test_close_inactive_file_rotation_and_removal(self):CODE
LOWfilebeat/tests/system/test_input.py266 def test_input_filter_dropfields(self):CODE
LOWfilebeat/tests/system/test_input.py291 def test_input_filter_includefields(self):CODE
LOWfilebeat/tests/system/test_input.py316 def test_restart_recursive_glob(self):CODE
LOWfilebeat/tests/system/test_input.py354 def test_disable_recursive_glob(self):CODE
LOWfilebeat/tests/system/test_input.py374 def test_input_processing_pipeline_disable_host(self):CODE
LOWfilebeat/tests/system/test_input.py394 def test_path_based_identity_tracking(self):CODE
LOWfilebeat/tests/system/test_input.py424 def test_inode_marker_based_identity_tracking(self):CODE
LOWfilebeat/tests/system/test_input.py458 def test_inode_marker_based_identity_tracking_to_path_based(self):CODE
LOWfilebeat/tests/system/test_input.py499 def __write_hello_word_to_test_input_file(self, testfile):CODE
LOWfilebeat/tests/system/test_shutdown.py103 def test_shutdown_wait_timeout(self, queue_type):CODE
LOWfilebeat/tests/system/test_syslog.py56 def test_syslog_with_tcp_invalid_message(self):STRING
LOW⚡filebeat/tests/system/test_syslog.py139 def test_syslog_with_unix_stream(self):STRING
LOW⚡filebeat/tests/system/test_syslog.py149 def test_syslog_with_unix_datagram(self):STRING
LOW⚡filebeat/tests/system/test_syslog.py156 def run_filebeat_and_send_using_socket(self, socket_type, send_over_socket):STRING
LOW⚡filebeat/tests/system/test_syslog.py204 def test_syslog_with_unix_stream_invalid_message(self):STRING
LOW⚡filebeat/tests/system/test_syslog.py214 def test_syslog_with_unix_datagram_invalid_message(self):STRING
LOW⚡filebeat/tests/system/test_syslog.py221 def run_filebeat_and_send_invalid_message_using_socket(self, socket_type, send_over_socket):STRING
LOWfilebeat/tests/system/test_registrar.py22 def test_registrar_file_content(self):CODE
LOWfilebeat/tests/system/test_registrar.py127 def test_custom_registry_file_location(self):CODE
LOWfilebeat/tests/system/test_registrar.py152 def test_registry_file_default_permissions(self):CODE
LOWfilebeat/tests/system/test_registrar.py186 def test_registry_file_custom_permissions(self):CODE
LOWfilebeat/tests/system/test_registrar.py221 def test_registry_file_update_permissions(self):CODE
LOWfilebeat/tests/system/test_registrar.py526 def test_rotating_file_with_restart(self):CODE
LOWfilebeat/tests/system/test_registrar.py632 def test_state_after_rotation(self):CODE
121 more matches not shown…
Self-Referential Comments37 hits · 110 pts
SeverityFileLineSnippetContext
MEDIUMmetricbeat/metricbeat.yml3# This file is an example configuration file highlighting only the most commonCOMMENT
MEDIUMmetricbeat/metricbeat.reference.yml3# This file is a full configuration example documenting all non-deprecatedCOMMENT
MEDIUMfilebeat/filebeat.reference.yml3# This file is a full configuration example documenting all non-deprecatedCOMMENT
MEDIUMfilebeat/filebeat.yml3# This file is an example configuration file highlighting only the most commonCOMMENT
MEDIUMwinlogbeat/winlogbeat.reference.yml3# This file is an example configuration file highlighting only the most commonCOMMENT
MEDIUMwinlogbeat/winlogbeat.yml3# This file is an example configuration file highlighting only the most commonCOMMENT
MEDIUM…ts/docker/elasticsearch_kerberos/scripts/installkdc.sh81# Create a link so addprinc.sh is on pathCOMMENT
MEDIUM…vironments/docker/elasticsearch/kerberos/installkdc.sh72# Create a link so addprinc.sh is on pathCOMMENT
MEDIUM…/environments/docker/elasticsearch/pki/generate_pki.sh2# Create the sha256 fingerprint for the CA certificateCOMMENT
MEDIUMheartbeat/heartbeat.yml3# This file is an example configuration file highlighting only some common options.COMMENT
MEDIUMheartbeat/heartbeat.yml12# Define a directory from which to load monitor definitions. Definitions take the formCOMMENT
MEDIUMheartbeat/heartbeat.reference.yml3# This file is a full configuration example documenting all non-deprecatedCOMMENT
MEDIUMheartbeat/heartbeat.reference.yml13# Define a directory from which to load monitor definitions. Definitions take the formCOMMENT
MEDIUMheartbeat/heartbeat.reference.yml74# Define a directory to load monitor definitions from. Definitions take the formCOMMENT
MEDIUMheartbeat/heartbeat.docker.yml1# Define a directory to load monitor definitions from. Definitions take the formCOMMENT
MEDIUMpacketbeat/packetbeat.yml3# This file is an example configuration file highlighting only the most commonCOMMENT
MEDIUMpacketbeat/packetbeat.reference.yml3# This file is a full configuration example documenting all non-deprecatedCOMMENT
MEDIUMdev-tools/packaging/packages.yml2# This file contains the package specifications for both Community Beats andCOMMENT
MEDIUMx-pack/osquerybeat/dev-tools/packaging/packages.yml3# This file contains the package specifications for Osquerybeat.COMMENT
MEDIUMx-pack/metricbeat/metricbeat.yml3# This file is an example configuration file highlighting only the most commonCOMMENT
MEDIUMx-pack/metricbeat/metricbeat.reference.yml3# This file is a full configuration example documenting all non-deprecatedCOMMENT
MEDIUMx-pack/filebeat/filebeat.reference.yml3# This file is a full configuration example documenting all non-deprecatedCOMMENT
MEDIUMx-pack/filebeat/filebeat.yml3# This file is an example configuration file highlighting only the most commonCOMMENT
MEDIUMx-pack/filebeat/input/netflow/fields_gen.go138 writeLine(out, "# This file is generated. Do not modify.")CODE
MEDIUMx-pack/filebeat/input/netflow/_meta/fields.yml2# This file is generated. Do not modify.COMMENT
MEDIUM…nput/awscloudwatch/_meta/terraform/.terraform.lock.hcl1# This file is maintained automatically by "terraform init".COMMENT
MEDIUM…lebeat/input/awss3/_meta/terraform/.terraform.lock.hcl1# This file is maintained automatically by "terraform init".COMMENT
MEDIUMx-pack/winlogbeat/winlogbeat.reference.yml3# This file is an example configuration file highlighting only the most commonCOMMENT
MEDIUMx-pack/winlogbeat/winlogbeat.yml3# This file is an example configuration file highlighting only the most commonCOMMENT
MEDIUMx-pack/heartbeat/heartbeat.yml3# This file is an example configuration file highlighting only some common options.COMMENT
MEDIUMx-pack/heartbeat/heartbeat.yml12# Define a directory from which to load monitor definitions. Definitions take the formCOMMENT
MEDIUMx-pack/heartbeat/heartbeat.reference.yml3# This file is a full configuration example documenting all non-deprecatedCOMMENT
MEDIUMx-pack/heartbeat/heartbeat.reference.yml13# Define a directory from which to load monitor definitions. Definitions take the formCOMMENT
MEDIUMx-pack/heartbeat/heartbeat.reference.yml74# Define a directory to load monitor definitions from. Definitions take the formCOMMENT
MEDIUMx-pack/heartbeat/heartbeat.docker.yml1# Define a directory to load monitor definitions from. Definitions take the formCOMMENT
MEDIUMx-pack/packetbeat/packetbeat.yml3# This file is an example configuration file highlighting only the most commonCOMMENT
MEDIUMx-pack/packetbeat/packetbeat.reference.yml3# This file is a full configuration example documenting all non-deprecatedCOMMENT
Decorative Section Separators25 hits · 94 pts
SeverityFileLineSnippetContext
MEDIUMlibbeat/otel/otelconsumer/otelconsumer_test.go659 // ── Beats ES output path ──────────────────────────────────────────COMMENT
MEDIUM⚡x-pack/metricbeat/module/azure/azure.go342// ├──────────────────────────────────────────┼─────────────┼─────────────COMMENT
MEDIUM⚡x-pack/metricbeat/module/azure/azure.go345// │◀───────────────────────(5min)────────────┼────────────▶│COMMENT
MEDIUM⚡x-pack/metricbeat/module/azure/azure.go348// │◀───────────────────────(5min)─────────────────────────▶│COMMENT
MEDIUM⚡x-pack/metricbeat/module/azure/azure.go365// |◀───────────────────────(5min)─────────────────────────▶│COMMENT
MEDIUM⚡x-pack/metricbeat/module/azure/azure.go367// ├────────────────────────────────────────────────────────┼─────────────COMMENT
MEDIUM⚡x-pack/metricbeat/module/azure/azure.go370// |◀───────────────────────(5min)─────────────────────────▶│COMMENT
MEDIUM⚡x-pack/metricbeat/module/azure/azure.go373// │◀───────────────────────(5min)─────────────────────────▶│COMMENT
MEDIUM⚡x-pack/metricbeat/module/azure/azure.go391// ├──────────────────────────────────────────┼─────────────┼─────────────COMMENT
MEDIUM⚡x-pack/metricbeat/module/azure/azure.go394// |◀───────────────────────(60min)────────────────────────▶│COMMENT
MEDIUM⚡x-pack/metricbeat/module/azure/azure.go397// │◀───────────────────────(PT1H)────────────┼────────────▶│COMMENT
MEDIUM⚡x-pack/metricbeat/module/azure/azure.go417// ├──────────────────────────────────────────┼─────────────┼──────────────|COMMENT
MEDIUM⚡x-pack/metricbeat/module/azure/azure.go420// |◀───────────────────────(5min)─────────────────────────▶│ |COMMENT
MEDIUM⚡x-pack/metricbeat/module/azure/azure.go423// │◀───────────────────────(5min)─────────────────────────▶| │COMMENT
MEDIUMx-pack/heartbeat/hbreceiver/smoke_test.go31// ── helpers ──────────────────────────────────────────────────────────────────COMMENT
MEDIUMx-pack/heartbeat/hbreceiver/smoke_test.go134// ── HTTP monitor tests ────────────────────────────────────────────────────────COMMENT
MEDIUMx-pack/heartbeat/hbreceiver/smoke_test.go318// ── TCP monitor tests ─────────────────────────────────────────────────────────COMMENT
MEDIUMx-pack/heartbeat/hbreceiver/smoke_test.go361// ── ICMP monitor tests ────────────────────────────────────────────────────────COMMENT
MEDIUMx-pack/heartbeat/hbreceiver/smoke_test.go387// ── Monitor lifecycle tests ───────────────────────────────────────────────────COMMENT
MEDIUMx-pack/heartbeat/hbreceiver/smoke_test.go411// ── Event field tests ─────────────────────────────────────────────────────────COMMENT
MEDIUMx-pack/heartbeat/hbreceiver/smoke_test.go534// ── Dynamic config reload tests ───────────────────────────────────────────────COMMENT
MEDIUMx-pack/libbeat/common/identityfederation/aws.go45// ──────────────────────────────────────────────COMMENT
MEDIUMx-pack/libbeat/common/identityfederation/aws.go47// ──────────────────────────────────────────────COMMENT
MEDIUMx-pack/libbeat/common/identityfederation/aws.go118// ──────────────────────────────────────────────COMMENT
MEDIUMx-pack/libbeat/common/identityfederation/aws.go120// ──────────────────────────────────────────────COMMENT
Structural Annotation Overuse54 hits · 85 pts
SeverityFileLineSnippetContext
LOWdocs/reference/loggingplugin/log-driver-installation.md22## Step 1: Install the Elastic Logging Plugin plugin [_step_1_install_the_elastic_logging_plugin_plugin]COMMENT
LOWdocs/reference/loggingplugin/log-driver-installation.md62## Step 2: Configure the Elastic Logging Plugin [_step_2_configure_the_elastic_logging_plugin]COMMENT
LOW…ce/metricbeat/metricbeat-installation-configuration.md51## Step 1: Install Metricbeat [install]COMMENT
LOW…ce/metricbeat/metricbeat-installation-configuration.md141## Step 2: Connect to the {{stack}} [set-connection]COMMENT
LOW…ce/metricbeat/metricbeat-installation-configuration.md211## Step 3: Enable and configure metrics collection modules [enable-modules]COMMENT
LOW…ce/metricbeat/metricbeat-installation-configuration.md315## Step 4: Set up assetsCOMMENT
LOW…ce/metricbeat/metricbeat-installation-configuration.md376## Step 5: Start MetricbeatCOMMENT
LOW…ce/metricbeat/metricbeat-installation-configuration.md457## Step 6: View your data in {{kib}} [view-data]COMMENT
LOWdocs/reference/filebeat/migrate-to-filestream.md110### Step 1: Unique identifiers [step_1]COMMENT
LOWdocs/reference/filebeat/migrate-to-filestream.md151### Step 2: The "take over" mode [step_2]COMMENT
LOWdocs/reference/filebeat/migrate-to-filestream.md238### Step 3: Migrate additional parameters if necessary [step_3]COMMENT
LOWdocs/reference/filebeat/migrate-to-filestream.md379### Step 4: Validating the migration [step_4]COMMENT
LOW…erence/filebeat/filebeat-installation-configuration.md48## Step 1: Install Filebeat [installation]COMMENT
LOW…erence/filebeat/filebeat-installation-configuration.md136## Step 2: Connect to the {{stack}} [set-connection]COMMENT
LOW…erence/filebeat/filebeat-installation-configuration.md208## Step 3: Collect log data [collect-log-data]COMMENT
LOW…erence/filebeat/filebeat-installation-configuration.md341## Step 4: Set up assets [setup-assets]COMMENT
LOW…erence/filebeat/filebeat-installation-configuration.md412## Step 5: Start Filebeat [start]COMMENT
LOW…erence/filebeat/filebeat-installation-configuration.md487## Step 6: View your data in {{kib}} [view-data]COMMENT
LOW…ence/auditbeat/auditbeat-installation-configuration.md45## Step 1: Install Auditbeat [install]COMMENT
LOW…ence/auditbeat/auditbeat-installation-configuration.md134## Step 2: Connect to the {{stack}} [set-connection]COMMENT
LOW…ence/auditbeat/auditbeat-installation-configuration.md200## Step 3: Configure data collection modules [enable-modules]COMMENT
LOW…ence/auditbeat/auditbeat-installation-configuration.md234## Step 4: Set up assets [setup-assets]COMMENT
LOW…ence/auditbeat/auditbeat-installation-configuration.md295## Step 5: Start Auditbeat [start]COMMENT
LOW…ence/auditbeat/auditbeat-installation-configuration.md370## Step 6: View your data in {{kib}} [view-data]COMMENT
LOW…ce/winlogbeat/winlogbeat-installation-configuration.md49## Step 1: Install Winlogbeat [installation]COMMENT
LOW…ce/winlogbeat/winlogbeat-installation-configuration.md96## Step 2: Connect to the {{stack}} [set-connection]COMMENT
LOW…ce/winlogbeat/winlogbeat-installation-configuration.md161## Step 3: Configure Winlogbeat [configuration]COMMENT
LOW…ce/winlogbeat/winlogbeat-installation-configuration.md205## Step 4: Set up assets [setup-assets]COMMENT
LOW…ce/winlogbeat/winlogbeat-installation-configuration.md230## Step 5: Start Winlogbeat [start]COMMENT
LOW…ce/winlogbeat/winlogbeat-installation-configuration.md264## Step 6: View your data in {{kib}} [view-data]COMMENT
LOW…ence/heartbeat/heartbeat-installation-configuration.md49## Step 1: Install Heartbeat [installation]COMMENT
LOW…ence/heartbeat/heartbeat-installation-configuration.md137## Step 2: Connect to the {{stack}} [set-connection]COMMENT
LOW…ence/heartbeat/heartbeat-installation-configuration.md207## Step 3: Configure Heartbeat monitors [configuration]COMMENT
LOW…ence/heartbeat/heartbeat-installation-configuration.md251## Step 4: Configure the Heartbeat location [configurelocation]COMMENT
LOW…ence/heartbeat/heartbeat-installation-configuration.md287## Step 5: Set up assets [setup-assets]COMMENT
LOW…ence/heartbeat/heartbeat-installation-configuration.md333## Step 6: Start Heartbeat [start]COMMENT
LOW…ence/heartbeat/heartbeat-installation-configuration.md406## Step 7: View your data in {{kib}} [view-data]COMMENT
LOW…ce/packetbeat/packetbeat-installation-configuration.md92## Step 1: Install Packetbeat [install]COMMENT
LOW…ce/packetbeat/packetbeat-installation-configuration.md176## Step 2: Connect to the {{stack}} [set-connection]COMMENT
LOW…ce/packetbeat/packetbeat-installation-configuration.md246## Step 3: Configure sniffing [configuration]COMMENT
LOW…ce/packetbeat/packetbeat-installation-configuration.md372## Step 4: Set up assetsCOMMENT
LOW…ce/packetbeat/packetbeat-installation-configuration.md432## Step 5: Start PacketbeatCOMMENT
LOW…ce/packetbeat/packetbeat-installation-configuration.md506## Step 6: View your data in {{kib}} [view-data]COMMENT
LOW⚡libbeat/tests/integration/elasticsearch.go38 // Step 1: Get the Elasticsearch Admin URL so we can query any indexCOMMENT
LOW⚡libbeat/tests/integration/elasticsearch.go41 // Step 2: Format the search URL for the `foo` datastreamCOMMENT
LOW⚡libbeat/tests/integration/elasticsearch.go45 // Step 3: Add query parametersCOMMENT
LOW⚡libbeat/tests/integration/elasticsearch.go56 // Step 4: Perform the HTTP GET request using HttpDoCOMMENT
LOW⚡libbeat/tests/integration/elasticsearch.go63 // Step 5: Parse the response body to extract eventsCOMMENT
LOWlibbeat/tests/integration/elasticsearch.go76 // Step 6: Extract the `message` field from each event and return the messagesCOMMENT
LOWx-pack/libbeat/common/aws/credentials.go301 // Step 2: Assume the remote role (the user's configured role), using theCOMMENT
LOWx-pack/libbeat/common/aws/credentials_test.go108 // Step 1: AssumeRoleWithWebIdentity → Elastic Global RoleCOMMENT
LOWx-pack/libbeat/common/aws/credentials_test.go127 // Step 2: AssumeRole → customer remote roleCOMMENT
LOWx-pack/libbeat/common/aws/credentials_test.go204 // Step 1: AssumeRole → Elastic Global Role (IRSA path, no WebIdentity)COMMENT
LOWx-pack/libbeat/common/aws/credentials_test.go223 // Step 2: AssumeRole → customer remote roleCOMMENT
Empty Error Handlers13 hits · 65 pts
SeverityFileLineSnippetContext
HIGHmetricbeat/module/elasticsearch/test_elasticsearch.py38except NotFoundError:CODE
HIGHmetricbeat/module/elasticsearch/test_elasticsearch.py47except NotFoundError:CODE
HIGHmetricbeat/module/elasticsearch/test_elasticsearch.py54except NotFoundError:CODE
HIGHfilebeat/tests/system/filebeat.py174except ValueError: # log file was incomplete, ignore mid writesCODE
HIGHfilebeat/tests/system/test_modules.py190except NotFoundError:CODE
HIGHfilebeat/tests/system/test_pipeline.py49except NotFoundError:CODE
HIGHlibbeat/tests/system/beat/beat.py162except BaseException:CODE
HIGHlibbeat/tests/system/beat/beat.py167except BaseException:CODE
HIGHlibbeat/tests/system/beat/beat.py416except BaseException:CODE
HIGHlibbeat/tests/system/beat/beat.py488except IOError:CODE
HIGHlibbeat/tests/system/beat/beat.py587except IOError:CODE
HIGHlibbeat/tests/system/beat/beat.py557except FileNotFoundError as e:CODE
HIGHlibbeat/scripts/generate_makefile_doc.py66except BaseException:CODE
Slop Phrases21 hits · 62 pts
SeverityFileLineSnippetContext
MEDIUMmetricbeat/metricbeat.reference.yml1253# For example, you can use the following processors to keep the fields thatCOMMENT
MEDIUMmetricbeat/mb/module/example_test.go123 // for demonstration purposes.COMMENT
MEDIUMfilebeat/filebeat.reference.yml425# you can use different inputs for various configurations.COMMENT
MEDIUMfilebeat/filebeat.reference.yml1581# For example, you can use the following processors to keep the fields thatCOMMENT
MEDIUMfilebeat/filebeat.yml18# you can use different inputs for various configurations.COMMENT
MEDIUMauditbeat/auditbeat.reference.yml285# For example, you can use the following processors to keep the fields thatCOMMENT
MEDIUMwinlogbeat/winlogbeat.reference.yml161# For example, you can use the following processors to keep the fields thatCOMMENT
MEDIUMheartbeat/heartbeat.reference.yml405# For example, you can use the following processors to keep the fields thatCOMMENT
MEDIUMpacketbeat/packetbeat.yml12# Select the network interface to sniff the data. On Linux, you can use theCOMMENT
MEDIUMpacketbeat/packetbeat.reference.yml762# For example, you can use the following processors to keep the fields thatCOMMENT
MEDIUMx-pack/osquerybeat/osquerybeat.reference.yml366# For example, you can use the following processors to keep the fields thatCOMMENT
MEDIUMx-pack/metricbeat/metricbeat.reference.yml1930# For example, you can use the following processors to keep the fields thatCOMMENT
LOW…module/aws/mtest/scripts/test_cloudwatch_metricset.yml2# Please make sure you have EC2 instances running with tags. Then replace aws.ymlCOMMENT
MEDIUMx-pack/filebeat/filebeat.reference.yml2125# you can use different inputs for various configurations.COMMENT
MEDIUMx-pack/filebeat/filebeat.reference.yml3530# For example, you can use the following processors to keep the fields thatCOMMENT
MEDIUMx-pack/filebeat/filebeat.yml18# you can use different inputs for various configurations.COMMENT
MEDIUMx-pack/auditbeat/auditbeat.reference.yml349# For example, you can use the following processors to keep the fields thatCOMMENT
MEDIUMx-pack/winlogbeat/winlogbeat.reference.yml163# For example, you can use the following processors to keep the fields thatCOMMENT
MEDIUMx-pack/heartbeat/heartbeat.reference.yml405# For example, you can use the following processors to keep the fields thatCOMMENT
MEDIUMx-pack/packetbeat/packetbeat.yml12# Select the network interface to sniff the data. On Linux, you can use theCOMMENT
MEDIUMx-pack/packetbeat/packetbeat.reference.yml762# For example, you can use the following processors to keep the fields thatCOMMENT
AI Slop Vocabulary19 hits · 56 pts
SeverityFileLineSnippetContext
MEDIUMmetricbeat/module/windows/wmi/config.go107 // while we want to leverage all filtering capabilitiesCOMMENT
MEDIUMmetricbeat/module/kubernetes/util/kubernetes.go749// A metaGen struct implements a MetaGen interface and is designed to utilize the necessary watchers to collect(GenerateCOMMENT
MEDIUM…ditbeat/module/file_integrity/fileinfo_windows_test.go63// TestGetObjectSecurityInfoRobustness tests the robust security info functionalityCOMMENT
MEDIUMauditbeat/module/file_integrity/kprobes/path_inotify.go56// https://lore.kernel.org/all/20210810151220.285179-5-amir73il@gmail.com/). Essentially this commit addsCOMMENT
MEDIUMlibbeat/publisher/queue/slabqueue/slabqueue_test.go975 // the target as live events drain. A generous bound keeps this robust onCOMMENT
MEDIUM…beat/processors/add_cloud_metadata/provider_aws_ec2.go158// getTags is a helper to extract EC2 tags. Internally it utilize multiple extraction methods.COMMENT
MEDIUMlibbeat/outputs/elasticsearch/client_proxy_test.go133// This test is less robust than the others: when golang derives proxy settingsCOMMENT
MEDIUMx-pack/metricbeat/module/azure/monitor_service.go440 // we leverage the modified response intervalCOMMENT
MEDIUMx-pack/metricbeat/module/azure/client_batch.go241 // we leverage the modified response intervalCOMMENT
MEDIUM…k/metricbeat/module/azure/app_insights/service_test.go161 // the assertion robust against minor format changes across azcore versions.COMMENT
MEDIUMx-pack/metricbeat/module/meraki/reporter.go47 // we make use of the fact that all the dashboard API responses utilizeCOMMENT
MEDIUMx-pack/filebeat/filebeat.reference.yml860 # set to leverage this functionality.COMMENT
MEDIUMx-pack/filebeat/filebeat.reference.yml865 # set to leverage this functionality.COMMENT
MEDIUMx-pack/filebeat/input/streaming/websocket.go173 // this allows seamless header creation in formHeader() for the initial connectionCOMMENT
MEDIUMx-pack/filebeat/input/cel/input.go1021 // more robust, but there is no real consensus and the RFC is notCOMMENT
LOW…/filebeat/module/cyberarkpas/audit/ingest/pipeline.yml413 # ... this script can be updated to just create two output lists, oneCOMMENT
MEDIUMx-pack/filebeat/module/fortinet/_meta/config.yml17 # set to leverage this functionality.COMMENT
MEDIUMx-pack/filebeat/module/fortinet/_meta/config.yml22 # set to leverage this functionality.COMMENT
MEDIUMx-pack/winlogbeat/module/wintest/simulate_test.go133 // a robust indicator that the event has passed through theCOMMENT
Cross-File Repetition7 hits · 35 pts
SeverityFileLineSnippetContext
HIGHmetricbeat/tests/system/test_base.py0test that the template can be loaded with `setup --index-management`STRING
HIGHfilebeat/tests/system/test_base.py0test that the template can be loaded with `setup --index-management`STRING
HIGHauditbeat/tests/system/test_base.py0test that the template can be loaded with `setup --index-management`STRING
HIGHheartbeat/tests/system/test_base.py0test that the template can be loaded with `setup --index-management`STRING
HIGH…cketbeat/tests/system/test_0021_pgsql_send_opetions.py0should not include request and response by default.STRING
HIGHpacketbeat/tests/system/test_0020_mysql_send_options.py0should not include request and response by default.STRING
HIGHpacketbeat/tests/system/test_0022_redis_send_options.py0should not include request and response by default.STRING
Verbosity Indicators14 hits · 24 pts
SeverityFileLineSnippetContext
LOWmetricbeat/module/kubernetes/util/kubernetes.go483 // of a single node(e.g. created by pod metricset). In that case, we need to check if we are trying to create a new wCOMMENT
LOWmetricbeat/module/kubernetes/event/event.go133 // so we need to check if they are valid firstCOMMENT
LOWheartbeat/reload/list.go125 updateList[hash] = config // We need to check if the runner takes updatesCODE
LOW⚡libbeat/tests/integration/elasticsearch.go38 // Step 1: Get the Elasticsearch Admin URL so we can query any indexCOMMENT
LOW⚡libbeat/tests/integration/elasticsearch.go41 // Step 2: Format the search URL for the `foo` datastreamCOMMENT
LOW⚡libbeat/tests/integration/elasticsearch.go45 // Step 3: Add query parametersCOMMENT
LOW⚡libbeat/tests/integration/elasticsearch.go56 // Step 4: Perform the HTTP GET request using HttpDoCOMMENT
LOW⚡libbeat/tests/integration/elasticsearch.go63 // Step 5: Parse the response body to extract eventsCOMMENT
LOWlibbeat/tests/integration/elasticsearch.go76 // Step 6: Extract the `message` field from each event and return the messagesCOMMENT
LOWx-pack/libbeat/common/aws/credentials.go301 // Step 2: Assume the remote role (the user's configured role), using theCOMMENT
LOWx-pack/libbeat/common/aws/credentials_test.go108 // Step 1: AssumeRoleWithWebIdentity → Elastic Global RoleCOMMENT
LOWx-pack/libbeat/common/aws/credentials_test.go127 // Step 2: AssumeRole → customer remote roleCOMMENT
LOWx-pack/libbeat/common/aws/credentials_test.go204 // Step 1: AssumeRole → Elastic Global Role (IRSA path, no WebIdentity)COMMENT
LOWx-pack/libbeat/common/aws/credentials_test.go223 // Step 2: AssumeRole → customer remote roleCOMMENT
Redundant / Tautological Comments14 hits · 19 pts
SeverityFileLineSnippetContext
LOW…ollstats/testing/mongodb/standalone/seed-standalone.sh34# Check if docker is availableCOMMENT
LOWmetricbeat/module/kafka/_meta/run.sh7# Check if KAFKA_ADVERTISED_HOST is setCOMMENT
LOWmetricbeat/module/elasticsearch/test_elasticsearch.py176 # Check if an ml job already existsCOMMENT
LOWmetricbeat/module/elasticsearch/test_elasticsearch.py310 # Check if trial is already enabledCOMMENT
LOWmetricbeat/module/elasticsearch/test_elasticsearch.py324 # Check if basic license is already enabledCOMMENT
LOWscript/config_collector.py36 # Check if full config existsSTRING
LOWscript/config_collector.py51 # Check if short config was disabled in fields.ymlSTRING
LOWscript/test_apm.sh12# Check if a special branch env variable is setCOMMENT
LOWscript/stresstest.sh76# Check if the test regex matches any testsCOMMENT
LOWheartbeat/heartbeat.yml25 # Set enabled to true (or delete the following line) to enable this monitorCOMMENT
LOWpacketbeat/scripts/create_tcp_protocol.py64 # Write file to new locationCOMMENT
LOW.buildkite/scripts/docker.sh30 # Check if we're logged in to Docker HubCOMMENT
LOWx-pack/metricbeat/module/ibmmq/test_ibmmq.py36 # Verify if processors are correctly setup.COMMENT
LOWx-pack/heartbeat/heartbeat.yml25 # Set enabled to true (or delete the following line) to enable this monitorCOMMENT
Deep Nesting17 hits · 17 pts
SeverityFileLineSnippetContext
LOWmetricbeat/module/system/test_system.py261CODE
LOWfilebeat/module/auditd/log/ingest/gen-ecs-mappings.py36CODE
LOWfilebeat/tests/system/test_shutdown.py142CODE
LOWfilebeat/tests/system/filebeat.py153CODE
LOWfilebeat/tests/system/test_modules.py493CODE
LOWfilebeat/tests/system/test_modules.py388CODE
LOWscript/renamed_fields.py28CODE
LOWscript/kibana-migration.py23CODE
LOWscript/kibana-migration.py42CODE
LOWscript/kibana-migration.py64CODE
LOWheartbeat/tests/system/test_autodiscovery.py16CODE
LOWlibbeat/tests/system/beat/compose.py76CODE
LOWlibbeat/tests/system/beat/beat.py433CODE
LOWlibbeat/tests/system/beat/beat.py514CODE
LOWlibbeat/tests/system/beat/beat.py568CODE
LOWdev-tools/aggregate_coverage.py12CODE
LOWdev-tools/cmd/dashboards/export_5x_dashboards.py8CODE
Magic Placeholder Names3 hits · 15 pts
SeverityFileLineSnippetContext
HIGHdocs/reference/serverless/beats.md47 api_key: "YOUR_API_KEY"CODE
HIGHdocs/reference/_snippets/aws-privatelink-cloud-id.md7 api_key: "YOUR_API_KEY"CODE
HIGHdocs/reference/_snippets/serverless-connect.md6 api_key: "YOUR_API_KEY" <1>CODE
TODO Padding5 hits · 10 pts
SeverityFileLineSnippetContext
LOW…beat/processors/translate_ldap_attribute/ldap_other.go28// TODO: implement automatic authentication for other platforms using kerberosCOMMENT
LOW⚡…querybeat/ext/osquery-extension/pkg/filters/filters.go180 // TODO: implement, conversion is not simpleCOMMENT
LOW⚡…querybeat/ext/osquery-extension/pkg/filters/filters.go183 // TODO: implement? possibly N/A, only works with full text search tablesCOMMENT
LOW⚡…querybeat/ext/osquery-extension/pkg/filters/filters.go186 // TODO: implementCOMMENT
LOW⚡…querybeat/ext/osquery-extension/pkg/filters/filters.go187 return false // TODO: implementCODE
Dead Code3 hits · 6 pts
SeverityFileLineSnippetContext
MEDIUMheartbeat/tests/system/test_telemetry.py22CODE
MEDIUMheartbeat/tests/system/test_telemetry.py27CODE
MEDIUMheartbeat/tests/system/test_telemetry.py28CODE
Excessive Try-Catch Wrapping5 hits · 5 pts
SeverityFileLineSnippetContext
LOWlibbeat/tests/system/beat/beat.py220 except Exception as ex:CODE
MEDIUM.buildkite/pipeline-scheduler.py62 print(f"Error: [{e}] when downloading from [{uri}]")STRING
LOWx-pack/auditbeat/tests/system/test_system_socket.py159 except Exception as e:CODE
LOWx-pack/auditbeat/tests/system/test_system_socket.py178 except Exception:CODE
LOWx-pack/auditbeat/tests/system/test_system_socket.py186 except Exception as e:CODE
Modern Structural Boilerplate1 hit · 1 pts
SeverityFileLineSnippetContext
LOWmetricbeat/module/uwsgi/test_uwsgi.py10logger = logging.getLogger(__name__)CODE