windows: ensure event.kind is correctly set for pipeline errors (#6612)

Author: MakoWish

packages/windows/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.24.0"
+ changes:
+ - description: Ensure event.kind is correctly set for pipeline errors.
+ type: enhancement
+ link: https://github.com/elastic/integrations/pull/6612
 - version: "1.23.0"
  changes:
  - description: Allow DNS query responses to have no data.

packages/windows/data_stream/forwarded/elasticsearch/ingest_pipeline/default.yml

@@ -49,5 +49,8 @@ processors:
 
 on_failure:
  - set:
- field: "error.message"
- value: "{{ _ingest.on_failure_message }}"
+ field: event.kind
+ value: pipeline_error
+ - append:
+ field: error.message
+ value: "{{{ _ingest.on_failure_message }}}"

packages/windows/data_stream/forwarded/elasticsearch/ingest_pipeline/powershell.yml

@@ -438,4 +438,4 @@ on_failure:
  value: pipeline_error
  - append:
  field: error.message
- value: "{{ _ingest.on_failure_message }}"
+ value: "{{{ _ingest.on_failure_message }}}"

packages/windows/data_stream/forwarded/elasticsearch/ingest_pipeline/powershell_operational.yml

@@ -497,4 +497,4 @@ on_failure:
  value: pipeline_error
  - append:
  field: error.message
- value: "{{ _ingest.on_failure_message }}"
+ value: "{{{ _ingest.on_failure_message }}}"

packages/windows/data_stream/forwarded/elasticsearch/ingest_pipeline/security.yml

@@ -3271,4 +3271,4 @@ on_failure:
  value: pipeline_error
  - append:
  field: error.message
- value: "{{ _ingest.on_failure_message }}"
+ value: "{{{ _ingest.on_failure_message }}}"

packages/windows/data_stream/forwarded/elasticsearch/ingest_pipeline/sysmon_operational.yml

@@ -1262,4 +1262,4 @@ on_failure:
  value: pipeline_error
  - append:
  field: error.message
- value: "{{ _ingest.on_failure_message }}"
+ value: "{{{ _ingest.on_failure_message }}}"

packages/windows/manifest.yml

@@ -1,6 +1,6 @@
 name: windows
 title: Windows
-version: 1.23.0
+version: 1.24.0
 description: Collect logs and metrics from Windows OS and services with Elastic Agent.
 type: integration
 categories: