Skip to content

[ECS] Update SEI packages to ECS 8.11.0 (Part 1) #8433

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
chemamartinez merged 48 commits into from
Nov 10, 2023
Merged

[ECS] Update SEI packages to ECS 8.11.0 (Part 1) #8433

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
48 commits
Select commit Hold shift + click to select a range
2855c75
[1password] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
3ec3b1e
[akamai] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
b8957ff
[amazon_security_lake] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
b1417b2
[arista_ngfw] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
63ca8d7
[atlassian_bitbucket] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
b7f8972
[atlassian_confluence] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
c435694
[atlassian_jira] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
10aa6f8
[auditd] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
6350f7b
[auditd_manager] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
c489086
[auth0] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
7f93c8d
[azure_blob_storage] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
3a390de
[azure_frontdoor] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
f1eba34
[barracuda] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
146ff0f
[barracuda_cloudgen_firewall] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
1a7c05b
[bitdefender] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
8e1119b
[bitwarden] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
bad6432
[box_events] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
47a0c56
[carbon_black_cloud] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
fbc75c9
[carbonblack_edr] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
b6487d4
[cef] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
1086f16
[cel] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
f40c0d3
[checkpoint] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
3e6d8dc
[cisco_aironet] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
5232644
[cisco_asa] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
30aea98
[cisco_duo] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
02390aa
[cisco_ftd] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
a6f0abd
[cisco_ios] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
fa43a62
[cisco_ise] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
73d62bd
[cisco_meraki] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
e13a5be
[cisco_nexus] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
886515a
[cisco_secure_email_gateway] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
83e9518
[cisco_secure_endpoint] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
34d3323
[cisco_umbrella] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
83776e7
[citrix_waf] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
2ba4f5f
[cloudflare] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
118649a
[cloudflare_logpush] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
cd11867
[crowdstrike] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
488c03b
[cyberark_pta] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
1d5f831
[cyberarkpas] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
3e3ca9a
[cylance] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
ff51b4f
[darktrace] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
9218574
[entityanalytics_entra_id] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
3b3a113
[entityanalytics_okta] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
dc36583
[f5_bigip] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
649c5d1
[fim] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
fbf485a
[fireeye] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
e8be893
[forcepoint_web] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
3d8124a
[forgerock] - change to ECS version git@v8.11.0
chemamartinez Nov 8, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
[cisco_duo] - change to ECS version git@v8.11.0 
ECS version in build manifest changed from git@v8.10.0 to git@v8.11.0. The set
ecs.version processor in pipelines was changed 8.11.0. Previously the pipeline
was setting version 8.10.0. The ecs.version in sample_event.json files was
changed to 8.11.0. Previously sample_event.json files contained 8.10.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20231013205208-271532fbc14d -ecs-version=8.11.0 -ecs-git-ref=git@v8.11.0 -pr=8433 packages/cisco_duo
  • Loading branch information
@chemamartinez
chemamartinez committed Nov 8, 2023
commit 30aea9897e57d42792c0ea71c2c9ca7698dc605c
2 changes: 1 addition & 1 deletion packages/cisco_duo/_dev/build/build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
dependencies:
ecs:
reference: "git@v8.10.0"
reference: "git@v8.11.0"
5 changes: 5 additions & 0 deletions packages/cisco_duo/changelog.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: 1.20.0
changes:
- description: ECS version updated to 8.11.0.
type: enhancement
link: https://github.com/elastic/integrations/pull/8433
- version: "1.19.0"
changes:
- description: Improve 'event.original' check to avoid errors if set.
Expand Down
16 changes: 8 additions & 8 deletions packages/cisco_duo/data_stream/admin/_dev/test/pipeline/test-admin.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"action": "activation_begin",
Expand Down Expand Up @@ -43,7 +43,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"action": "admin_activate_duo_push",
Expand Down Expand Up @@ -77,7 +77,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"action": "activation_begin",
Expand Down Expand Up @@ -111,7 +111,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"action": "activation_set_password",
Expand Down Expand Up @@ -155,7 +155,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"action": "admin_self_activate",
Expand Down Expand Up @@ -200,7 +200,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"action": "admin_update",
Expand Down Expand Up @@ -246,7 +246,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"action": "user_update",
Expand Down Expand Up @@ -295,7 +295,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"action": "user_update",
Expand Down
2 changes: 1 addition & 1 deletion packages/cisco_duo/data_stream/admin/elasticsearch/ingest_pipeline/default.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ description: Pipeline for parsing cisco_duo administrator logs
processors:
- set:
field: ecs.version
value: '8.10.0'
value: '8.11.0'
- rename:
field: message
target_field: event.original
Expand Down
4 changes: 2 additions & 2 deletions packages/cisco_duo/data_stream/admin/sample_event.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@
"type": "logs"
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"elastic_agent": {
"id": "cdda426a-7e47-48c4-b2f5-b9f1ad5bf08a",
Expand Down Expand Up @@ -56,4 +56,4 @@
"user": {
"name": "narroway"
}
}
}
34 changes: 17 additions & 17 deletions packages/cisco_duo/data_stream/auth/_dev/test/pipeline/test-auth.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -173,7 +173,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -304,7 +304,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -434,7 +434,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -562,7 +562,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -674,7 +674,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -795,7 +795,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -907,7 +907,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -1020,7 +1020,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -1133,7 +1133,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -1246,7 +1246,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -1359,7 +1359,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -1472,7 +1472,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -1581,7 +1581,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -1686,7 +1686,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -1791,7 +1791,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -1886,7 +1886,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down
2 changes: 1 addition & 1 deletion packages/cisco_duo/data_stream/auth/_dev/test/pipeline/test-empty.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"expected": [
{
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"category": [
Expand Down
2 changes: 1 addition & 1 deletion packages/cisco_duo/data_stream/auth/elasticsearch/ingest_pipeline/default.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ description: Pipeline for parsing cisco_duo authentication logs
processors:
- set:
field: ecs.version
value: '8.10.0'
value: '8.11.0'
- rename:
field: message
target_field: event.original
Expand Down
4 changes: 2 additions & 2 deletions packages/cisco_duo/data_stream/auth/sample_event.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@
"type": "logs"
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"elastic_agent": {
"id": "cdda426a-7e47-48c4-b2f5-b9f1ad5bf08a",
Expand Down Expand Up @@ -139,4 +139,4 @@
},
"version": "67.0.3396.99"
}
}
}
2 changes: 1 addition & 1 deletion ...ta_stream/offline_enrollment/_dev/test/pipeline/test-offline-enrollment.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"original": "{\"action\": \"o2fa_user_provisioned\",\"description\": \"{\\\"user_agent\\\": \\\"DuoCredProv/4.0.6.413 (Windows NT 6.3.9600; x64; Server)\\\", \\\"hostname\\\": \\\"WKSW10x64\\\", \\\"factor\\\": \\\"duo_otp\\\"}\",\"isotimestamp\": \"2019-08-30T16:10:05+00:00\",\"object\": \"Acme Laptop Windows Logon\",\"timestamp\": 1567181405,\"username\": \"narroway\"}"
Expand Down
2 changes: 1 addition & 1 deletion packages/cisco_duo/data_stream/offline_enrollment/elasticsearch/ingest_pipeline/default.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ description: Pipeline for parsing cisco_duo offline enrollment logs
processors:
- set:
field: ecs.version
value: '8.10.0'
value: '8.11.0'
- rename:
field: message
target_field: event.original
Expand Down
4 changes: 2 additions & 2 deletions packages/cisco_duo/data_stream/offline_enrollment/sample_event.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@
"type": "logs"
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"elastic_agent": {
"id": "cdda426a-7e47-48c4-b2f5-b9f1ad5bf08a",
Expand Down Expand Up @@ -60,4 +60,4 @@
"user": {
"name": "narroway"
}
}
}
8 changes: 4 additions & 4 deletions packages/cisco_duo/data_stream/summary/_dev/test/pipeline/test-summary.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
{
"expected": [
{
"@timestamp": "2023-09-21T14:29:08.314577922Z",
"@timestamp": "2023-11-08T11:43:09.314573840Z",
"cisco_duo": {
"summary": {
"admin_count": 6,
Expand All @@ -11,7 +11,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"original": "{\"response\":{\"admin_count\":6,\"integration_count\":5,\"telephony_credits_remaining\":473,\"user_count\":4},\"stat\":\"OK\"}"
Expand All @@ -21,7 +21,7 @@
]
},
{
"@timestamp": "2023-09-21T14:29:08.314584362Z",
"@timestamp": "2023-11-08T11:43:09.314584090Z",
"cisco_duo": {
"summary": {
"admin_count": 3,
Expand All @@ -31,7 +31,7 @@
}
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"event": {
"original": "{\"response\":{\"admin_count\":3,\"integration_count\":9,\"telephony_credits_remaining\":960,\"user_count\":8},\"stat\":\"OK\"}"
Expand Down
2 changes: 1 addition & 1 deletion packages/cisco_duo/data_stream/summary/elasticsearch/ingest_pipeline/default.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ description: Pipeline for parsing cisco_duo summary logs
processors:
- set:
field: ecs.version
value: '8.10.0'
value: '8.11.0'
- set:
field: "@timestamp"
value: "{{{_ingest.timestamp}}}"
Expand Down
4 changes: 2 additions & 2 deletions packages/cisco_duo/data_stream/summary/sample_event.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@
"type": "logs"
},
"ecs": {
"version": "8.10.0"
"version": "8.11.0"
},
"elastic_agent": {
"id": "cdda426a-7e47-48c4-b2f5-b9f1ad5bf08a",
Expand All @@ -43,4 +43,4 @@
"forwarded",
"cisco_duo-summary"
]
}
}
Loading