Skip to content

Thor.kell/add anthropic compliance logs#23664

Open
tkell wants to merge 2 commits into
masterfrom
thor.kell/add-anthropic-compliance-logs
Open

Thor.kell/add anthropic compliance logs#23664
tkell wants to merge 2 commits into
masterfrom
thor.kell/add-anthropic-compliance-logs

Conversation

@tkell
Copy link
Copy Markdown
Contributor

@tkell tkell commented May 11, 2026

What does this PR do?

This might be right? Assets for anthropic-compliance-logs, re-using the existing source type id, but declaring a new folder with new assets.

I am unsure if I need to override the tile in web-ui, but I'll see if this builds first.

Motivation

Review checklist (to be filled by reviewers)

  • Feature or bugfix MUST have appropriate tests (unit, integration, e2e)
  • Add the qa/skip-qa label if the PR doesn't need to be tested during QA.
  • If you need to backport this PR to another branch, you can add the backport/<branch-name> label to the PR and it will automatically open a backport PR once this one is merged

tkell and others added 2 commits May 11, 2026 15:33
Adds a new sibling tile to anthropic_usage_and_costs for collecting
audit activity events from the Anthropic Compliance API
(GET /v1/compliance/activities). Crawler implementation lives in
DataDog/crawler-sdk under clients/anthropic_compliance_logs.

Assets:
- Log pipeline + tests for source:anthropic service:anthropic.compliance
  (flattens actor, GeoIP + UA enrichment, remaps type to evt.name)
- Overview dashboard with auth/admin/API-key lifecycle widgets
- Ingestion-stopped log alert monitor
- Five Log Explorer saved views (all, auth, API key, admin, org membership)
- CODEOWNERS entry under SaaS Integrations

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@dd-octo-sts
Copy link
Copy Markdown
Contributor

dd-octo-sts Bot commented May 11, 2026

⚠️ Recommendation: Add qa/skip-qa label

This PR does not modify any files shipped with the agent.

To help streamline the release process, please consider adding the qa/skip-qa label if these changes do not require QA testing.

@dd-octo-sts
Copy link
Copy Markdown
Contributor

dd-octo-sts Bot commented May 11, 2026

Validation Report

Validation Description Status
labeler Validate PR labeler config matches integration directories
saved-views Validate saved view JSON file structure and fields

Run ddev validate all changed --fix to attempt to auto-fix supported validations.

Passed validations (18)
Validation Description Status
agent-reqs Verify check versions match the Agent requirements file
ci Validate CI configuration and Codecov settings
codeowners Validate every integration has a CODEOWNERS entry
config Validate default configuration files against spec.yaml
dep Verify dependency pins are consistent and Agent-compatible
http Validate integrations use the HTTP wrapper correctly
imports Validate check imports do not use deprecated modules
integration-style Validate check code style conventions
jmx-metrics Validate JMX metrics definition files and config
legacy-signature Validate no integration uses the legacy Agent check signature
license-headers Validate Python files have proper license headers
licenses Validate third-party license attribution list
metadata Validate metadata.csv metric definitions
models Validate configuration data models match spec.yaml
openmetrics Validate OpenMetrics integrations disable the metric limit
package Validate Python package metadata and naming
readmes Validate README files have required sections
version Validate version consistency between package and changelog

View full run

Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 32c48f2fba

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment on lines +24 to +25
"critical": 1,
"warning": 1
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Differentiate warning and critical trigger conditions

This monitor defines both critical and warning as 1 while evaluating a single last("1h") < 1 condition, so the warning path is effectively unreachable and the {{#is_warning}} branch (which claims a 30-minute early warning) will not trigger as intended. As written, users only get the critical behavior, which defeats the staged alerting described in the message.

Useful? React with 👍 / 👎.

id: "activity_01R1sBnxj7yvtdZnt8DsfpRL"
organization_id: "org_01GuSHHxdWNCcTtk6Wr5arBM"
organization_uuid: "80cb55fa-462c-4bc0-82d6-07ebb1a6f004"
type: "claude_chat_viewed"
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Align parser test fixture with remapper output

The pipeline remaps top-level type to evt.name with preserveSource: false in assets/logs/anthropic-compliance-logs.yaml, so keeping type in the expected parsed payload makes this fixture inconsistent with the configured processors. This causes parser-test expectations to diverge from actual pipeline behavior and can fail integration asset validation.

Useful? React with 👍 / 👎.

@hestonhoffman hestonhoffman added the editorial review Waiting on a more in-depth review from a docs team editor label May 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants