Skip to content

[ECS] Update SEI packages to ECS 8.8 (Part 2) #6326

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 36 commits into from
May 31, 2023
Merged

[ECS] Update SEI packages to ECS 8.8 (Part 2) #6326

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
36 commits
Select commit Hold shift + click to select a range
5f07853
[crowdstrike] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
12172bf
[cyberark_pta] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
bd564cf
[cyberarkpas] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
b295796
[cylance] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
fd8a8e3
[darktrace] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
06c8247
[f5] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
f172f62
[f5_bigip] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
0cfa4f1
[fim] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
a4b79a0
[fireeye] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
69930f5
[forcepoint_web] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
d55a866
[forgerock] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
41eed5e
[fortinet_forticlient] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
beafcfe
[fortinet_fortiedr] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
c56f08b
[fortinet_fortigate] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
b92bcc8
[fortinet_fortimail] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
03664b7
[fortinet_fortimanager] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
5b617b0
[gcp] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
3675282
[gcp_pubsub] - update ECS to 8.8.0
taylor-swanson May 25, 2023
95baf9d
[github] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
91ecf29
[google_cloud_storage] - update ECS to 8.8.0
taylor-swanson May 25, 2023
53a686f
[google_workspace] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
ad382a1
[hashicorp_vault] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
b36c10a
[hid_bravura_monitor] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
a9a48ca
[http_endpoint] - update ECS to 8.8.0
taylor-swanson May 25, 2023
391f8a4
[httpjson] - update ECS to 8.8.0
taylor-swanson May 25, 2023
12bdf29
[imperva] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
fcf6632
[infoblox_bloxone_ddi] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
cd6c7dc
[infoblox_nios] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
1c558a6
[iptables] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
7a07d0f
[jamf_compliance_reporter] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
4df3206
[jumpcloud] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
95073b8
[juniper_junos] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
f4806aa
[juniper_netscreen] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
aed35fd
[juniper_srx] - update ECS to 8.8.0 from 8.7.0
taylor-swanson May 25, 2023
443a737
Revert changes to crowdstrike, handling in separate PR
taylor-swanson May 30, 2023
1b3137b
Merge branch 'main' into ecs-8.8-part2
taylor-swanson May 31, 2023
File filter

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
2 changes: 1 addition & 1 deletion packages/cyberark_pta/_dev/build/build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
dependencies:
ecs:
reference: git@8.7
reference: git@8.8
5 changes: 5 additions & 0 deletions packages/cyberark_pta/changelog.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.3.0"
changes:
- description: Update package to ECS 8.8.0.
type: enhancement
link: https://github.com/elastic/integrations/pull/6326
- version: "1.2.0"
changes:
- description: Update package-spec version to 2.7.0.
Expand Down
2 changes: 1 addition & 1 deletion ...ark_pta/data_stream/events/_dev/test/pipeline/test-active-dormant-user.json-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"code": "26",
Expand Down
2 changes: 1 addition & 1 deletion ...rk_pta/data_stream/events/_dev/test/pipeline/test-suspected-cred-theft.json-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"code": "1",
Expand Down
2 changes: 1 addition & 1 deletion packages/cyberark_pta/data_stream/events/elasticsearch/ingest_pipeline/default.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ description: Pipeline for CyberArk PTA
processors:
- set:
field: ecs.version
value: '8.7.0'
value: '8.8.0'
- set:
field: event.action
value: "{{cef.extensions.deviceCustomString5}}"
Expand Down
2 changes: 1 addition & 1 deletion packages/cyberark_pta/data_stream/events/sample_event.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"elastic_agent": {
"id": "61c2aa93-e34e-4412-bd9b-ce85257847de",
Expand Down
2 changes: 1 addition & 1 deletion packages/cyberark_pta/manifest.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
name: cyberark_pta
title: Cyberark Privileged Threat Analytics
version: "1.2.0"
version: "1.3.0"
description: Collect security logs from Cyberark PTA integration.
type: integration
format_version: 2.7.0
Expand Down
2 changes: 1 addition & 1 deletion packages/cyberarkpas/_dev/build/build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
dependencies:
ecs:
reference: git@8.7
reference: git@8.8
5 changes: 5 additions & 0 deletions packages/cyberarkpas/changelog.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "2.11.0"
changes:
- description: Update package to ECS 8.8.0.
type: enhancement
link: https://github.com/elastic/integrations/pull/6326
- version: "2.10.0"
changes:
- description: Update package to ECS 8.7.0.
Expand Down
12 changes: 6 additions & 6 deletions ...rarkpas/data_stream/audit/_dev/test/pipeline/test-105-add-file-category.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@
"ip": "10.0.1.20"
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add file category",
Expand Down Expand Up @@ -87,7 +87,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add file category",
Expand Down Expand Up @@ -154,7 +154,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add file category",
Expand Down Expand Up @@ -222,7 +222,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add file category",
Expand Down Expand Up @@ -289,7 +289,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add file category",
Expand Down Expand Up @@ -357,7 +357,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add file category",
Expand Down
12 changes: 6 additions & 6 deletions ...kpas/data_stream/audit/_dev/test/pipeline/test-106-update-file-category.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@
"ip": "10.0.1.20"
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "update file category",
Expand Down Expand Up @@ -87,7 +87,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "update file category",
Expand Down Expand Up @@ -154,7 +154,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "update file category",
Expand Down Expand Up @@ -222,7 +222,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "update file category",
Expand Down Expand Up @@ -290,7 +290,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "update file category",
Expand Down Expand Up @@ -358,7 +358,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "update file category",
Expand Down
2 changes: 1 addition & 1 deletion ...kpas/data_stream/audit/_dev/test/pipeline/test-107-delete-file-category.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@
"ip": "10.0.1.20"
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "delete file category",
Expand Down
2 changes: 1 addition & 1 deletion ...s/cyberarkpas/data_stream/audit/_dev/test/pipeline/test-124-rename-file.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@
"ip": "10.0.1.20"
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "rename file",
Expand Down
2 changes: 1 addition & 1 deletion ...erarkpas/data_stream/audit/_dev/test/pipeline/test-125-rename-file-cont.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@
"ip": "10.0.1.20"
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "rename file (cont.)",
Expand Down
2 changes: 1 addition & 1 deletion ...s/cyberarkpas/data_stream/audit/_dev/test/pipeline/test-126-unlock-file.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "unlock file",
Expand Down
2 changes: 1 addition & 1 deletion ...kpas/data_stream/audit/_dev/test/pipeline/test-130-cpm-disable-password.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "cpm disable password",
Expand Down
2 changes: 1 addition & 1 deletion ...arkpas/data_stream/audit/_dev/test/pipeline/test-178-get-user-s-details.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "get user's details",
Expand Down
24 changes: 12 additions & 12 deletions ...ages/cyberarkpas/data_stream/audit/_dev/test/pipeline/test-180-add-user.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add user",
Expand Down Expand Up @@ -95,7 +95,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add user",
Expand Down Expand Up @@ -173,7 +173,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add user",
Expand Down Expand Up @@ -251,7 +251,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add user",
Expand Down Expand Up @@ -329,7 +329,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add user",
Expand Down Expand Up @@ -407,7 +407,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add user",
Expand Down Expand Up @@ -485,7 +485,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add user",
Expand Down Expand Up @@ -564,7 +564,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add user",
Expand Down Expand Up @@ -643,7 +643,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add user",
Expand Down Expand Up @@ -722,7 +722,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add user",
Expand Down Expand Up @@ -801,7 +801,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add user",
Expand Down Expand Up @@ -880,7 +880,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add user",
Expand Down
2 changes: 1 addition & 1 deletion ...s/cyberarkpas/data_stream/audit/_dev/test/pipeline/test-181-update-safe.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "update safe",
Expand Down
4 changes: 2 additions & 2 deletions ...ages/cyberarkpas/data_stream/audit/_dev/test/pipeline/test-185-add-safe.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add safe",
Expand Down Expand Up @@ -80,7 +80,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add safe",
Expand Down
4 changes: 2 additions & 2 deletions ...es/cyberarkpas/data_stream/audit/_dev/test/pipeline/test-187-add-folder.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add folder",
Expand Down Expand Up @@ -85,7 +85,7 @@
}
},
"ecs": {
"version": "8.7.0"
"version": "8.8.0"
},
"event": {
"action": "add folder",
Expand Down
Loading