Add OpenAPI documentation for keep_unmatched field in ocsf mapper processor

content/en/api/v2/observability-pipelines/request.ValidatePipeline_3067748504.json

@@ -0,0 +1,50 @@
+{
+  "data": {
+    "attributes": {
+      "config": {
+        "destinations": [
+          {
+            "id": "datadog-logs-destination",
+            "inputs": [
+              "my-processor-group"
+            ],
+            "type": "datadog_logs"
+          }
+        ],
+        "processor_groups": [
+          {
+            "enabled": true,
+            "id": "my-processor-group",
+            "include": "service:my-service",
+            "inputs": [
+              "datadog-agent-source"
+            ],
+            "processors": [
+              {
+                "enabled": true,
+                "id": "ocsf-mapper-processor",
+                "include": "service:my-service",
+                "type": "ocsf_mapper",
+                "keep_unmatched": true,
+                "mappings": [
+                  {
+                    "include": "source:cloudtrail",
+                    "mapping": "CloudTrail Account Change"
+                  }
+                ]
+              }
+            ]
+          }
+        ],
+        "sources": [
+          {
+            "id": "datadog-agent-source",
+            "type": "datadog_agent"
+          }
+        ]
+      },
+      "name": "OCSF Mapper Keep Unmatched Pipeline"
+    },
+    "type": "pipelines"
+  }
+}

data/api/v2/CodeExamples.json

@@ -1280,6 +1280,11 @@
       "suffix": "_3024756866",
       "description": "Validate an observability pipeline with OCSF mapper custom mapping returns \"OK\" response"
     },
+    {
+      "group": "observability_pipelines",
+      "suffix": "_3067748504",
+      "description": "Validate an observability pipeline with OCSF mapper keep_unmatched returns \"OK\" response"
+    },
     {
       "group": "observability_pipelines",
       "suffix": "_3565101276",

data/api/v2/full_spec.yaml

@@ -44878,6 +44878,11 @@ components:
             targets.
           example: service:my-service
           type: string
+        keep_unmatched:
+          description: Whether to keep an event that does not match any of the mapping
+            filters.
+          example: false
+          type: boolean
         mappings:
           description: A list of mapping rules to convert events to the OCSF format.
           items: