Agent Health Metric for Windows Events Filtering

extension/agenthealth/handler/useragent/useragent.go

@@ -33,12 +33,17 @@
 	flagEnhancedContainerInsights = "enhanced_container_insights"
 	flagSELinux                   = "selinux"
 	flagROSA                      = "rosa"
+	FlagWindowsEventIDs           = "win_event_ids"
+	FlagWindowsEventFilters       = "win_event_filters"
+	FlagWindowsEventLevels        = "win_event_levels"
 	separator                     = " "
 
 	typeInputs     = "inputs"
 	typeProcessors = "processors"
 	typeOutputs    = "outputs"
 	typeFeature    = "feature"
+
+	pluginWindowsEventLog = "windows_event_log"
 )
 
 var (
@@ -79,9 +84,18 @@
 func (ua *userAgent) SetComponents(otelCfg *otelcol.Config, telegrafCfg *telegraf.Config) {
 	ua.dataLock.Lock()
 	defer ua.dataLock.Unlock()
+
+	winFeatures := collections.NewSet[string]()
+
 	for _, input := range telegrafCfg.Inputs {
 		ua.inputs.Add(input.Config.Name)
+		ua.detectWindowsEventLogFeatures(input, winFeatures)
 	}
+
+	if len(winFeatures) > 0 {
+		ua.AddFeatureFlags(maps.Keys(winFeatures)...)
+	}
+
 	for _, output := range telegrafCfg.Outputs {
 		ua.outputs.Add(output.Config.Name)
 	}

extension/agenthealth/handler/useragent/useragent_notwindows.go

@@ -0,0 +1,16 @@
+//go:build !windows
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: MIT
+
+package useragent
+
+import (
+	"github.com/influxdata/telegraf/models"
+
+	"github.com/aws/amazon-cloudwatch-agent/internal/util/collections"
+)
+
+func (ua *userAgent) detectWindowsEventLogFeatures(input *models.RunningInput, winFeatures collections.Set[string]) {
+	// No-op on non-Windows platforms
+}

extension/agenthealth/handler/useragent/useragent_test.go

@@ -284,3 +284,17 @@ func TestListen(t *testing.T) {
 	ua.SetContainerInsightsFlag()
 	wg.Wait()
 }
+
+func TestWindowsEventLogAdoptionMetrics(t *testing.T) {
+	ua := newUserAgent()
+
+	ua.AddFeatureFlags(FlagWindowsEventIDs, FlagWindowsEventFilters, FlagWindowsEventLevels)
+
+	assert.Len(t, ua.feature, 3)
+	assert.Equal(t, "feature:(win_event_filters win_event_ids win_event_levels)", ua.featureStr.Load())
+
+	header := ua.Header(true)
+	assert.Contains(t, header, FlagWindowsEventIDs)
+	assert.Contains(t, header, FlagWindowsEventFilters)
+	assert.Contains(t, header, FlagWindowsEventLevels)
+}

extension/agenthealth/handler/useragent/useragent_windows.go

@@ -0,0 +1,31 @@
+//go:build windows
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: MIT
+
+package useragent
+
+import (
+	"github.com/influxdata/telegraf/models"
+
+	"github.com/aws/amazon-cloudwatch-agent/internal/util/collections"
+	"github.com/aws/amazon-cloudwatch-agent/plugins/inputs/windows_event_log"
+)
+
+func (ua *userAgent) detectWindowsEventLogFeatures(input *models.RunningInput, winFeatures collections.Set[string]) {
+	if input.Config.Name == pluginWindowsEventLog {
+		if plugin, ok := input.Input.(*windows_event_log.Plugin); ok {
+			for _, eventConfig := range plugin.Events {
+				if len(eventConfig.EventIDs) > 0 {
+					winFeatures.Add(FlagWindowsEventIDs)
+				}
+				if len(eventConfig.Filters) > 0 {
+					winFeatures.Add(FlagWindowsEventFilters)
+				}
+				if len(eventConfig.Levels) > 0 {
+					winFeatures.Add(FlagWindowsEventLevels)
+				}
+			}
+		}
+	}
+}