xelogstash

• Many more events now populate xe_description and the existing ones are much better
• Added the step name for SQL Server Agent jobs
• All $(VAR) replacements inject a lower-case value because ELK is case-sensitive
• Tried my best to report the Agent job times in UTC. It works except if your history crosses daylight savings or in the minute when that changes. It also captures the local time so you can find it if you need it.
• Switched agent jobs to capture all jobs, failed jobs or no jobs. that means you need to update your TOML file.
• Added a better description for jobs that report "In Progress" steps

• Populate the database_name if it is empty and we have a database_id
• Add a utility, xeparse, that will read in XML events and output a raw JSON version

While this is a pre-release, I've been running in production for a few weeks now.