Skip to content

wiz.vulnerability: Set event.id required for CDR workflow. - #13201

Merged
kcreddy merged 2 commits into
elastic:mainfrom
kcreddy:wiz.vuln0event-id
Mar 25, 2025
Merged

wiz.vulnerability: Set event.id required for CDR workflow.#13201
kcreddy merged 2 commits into
elastic:mainfrom
kcreddy:wiz.vuln0event-id

Conversation

@kcreddy

@kcreddy kcreddy commented Mar 20, 2025

Copy link
Copy Markdown
Contributor

Proposed commit message

CDR workflow now requires event.id field as MUST HAVE.

Set event.id for vulnerability data stream. 
cloud_configuration_finding data stream already sets this field.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • [ ]

How to test this PR locally

Pipeline and System tests pass.

--- Test results for package: wiz - START ---
╭─────────┬─────────────────────────────┬───────────┬─────────────────────────────────────────────────────────────────┬────────┬──────────────╮
│ PACKAGE │ DATA STREAM                 │ TEST TYPE │ TEST NAME                                                       │ RESULT │ TIME ELAPSED │
├─────────┼─────────────────────────────┼───────────┼─────────────────────────────────────────────────────────────────┼────────┼──────────────┤
│ wiz     │ audit                       │ pipeline  │ (ingest pipeline warnings test-audit.log)                       │ PASS   │  429.24975ms │
│ wiz     │ audit                       │ pipeline  │ test-audit.log                                                  │ PASS   │  78.573666ms │
│ wiz     │ cloud_configuration_finding │ pipeline  │ (ingest pipeline warnings test-cloud-configuration-finding.log) │ PASS   │ 368.959041ms │
│ wiz     │ cloud_configuration_finding │ pipeline  │ test-cloud-configuration-finding.log                            │ PASS   │  83.765166ms │
│ wiz     │ issue                       │ pipeline  │ (ingest pipeline warnings test-issue.log)                       │ PASS   │ 393.212666ms │
│ wiz     │ issue                       │ pipeline  │ test-issue.log                                                  │ PASS   │  58.151209ms │
│ wiz     │ vulnerability               │ pipeline  │ (ingest pipeline warnings test-vulnerability.log)               │ PASS   │ 329.295167ms │
│ wiz     │ vulnerability               │ pipeline  │ test-vulnerability.log                                          │ PASS   │  89.235875ms │
╰─────────┴─────────────────────────────┴───────────┴─────────────────────────────────────────────────────────────────┴────────┴──────────────╯
--- Test results for package: wiz - END   ---
Done
--- Test results for package: wiz - START ---
╭─────────┬───────────────┬───────────┬───────────┬────────┬────────────────╮
│ PACKAGE │ DATA STREAM   │ TEST TYPE │ TEST NAME │ RESULT │   TIME ELAPSED │
├─────────┼───────────────┼───────────┼───────────┼────────┼────────────────┤
│ wiz     │ vulnerability │ system    │ default   │ PASS   │ 2m15.75436725s │
╰─────────┴───────────────┴───────────┴───────────┴────────┴────────────────╯
--- Test results for package: wiz - END   ---
Done

Related issues

@kcreddy kcreddy self-assigned this Mar 20, 2025
@kcreddy kcreddy added bugfix Pull request that fixes a bug issue Integration:wiz Wiz Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] labels Mar 20, 2025
@kcreddy
kcreddy marked this pull request as ready for review March 20, 2025 17:55
@kcreddy
kcreddy requested a review from a team as a code owner March 20, 2025 17:55
@elasticmachine

Copy link
Copy Markdown

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@elasticmachine

Copy link
Copy Markdown

💚 Build Succeeded

cc @kcreddy

@kcreddy
kcreddy merged commit 5436493 into elastic:main Mar 25, 2025
@kcreddy
kcreddy deleted the wiz.vuln0event-id branch March 25, 2025 08:51
@elastic-vault-github-plugin-prod

Copy link
Copy Markdown
Contributor

Package wiz - 2.9.3 containing this change is available at https://epr.elastic.co/package/wiz/2.9.3/

flexitrev pushed a commit that referenced this pull request Mar 25, 2025
CDR workflow now requires event.id field as MUST HAVE.

Set event.id for vulnerability data stream. 
cloud_configuration_finding data stream already sets this field.
flexitrev pushed a commit that referenced this pull request Mar 28, 2025
CDR workflow now requires event.id field as MUST HAVE.

Set event.id for vulnerability data stream. 
cloud_configuration_finding data stream already sets this field.
flexitrev pushed a commit that referenced this pull request Mar 28, 2025
CDR workflow now requires event.id field as MUST HAVE.

Set event.id for vulnerability data stream. 
cloud_configuration_finding data stream already sets this field.
flexitrev pushed a commit that referenced this pull request Mar 28, 2025
CDR workflow now requires event.id field as MUST HAVE.

Set event.id for vulnerability data stream. 
cloud_configuration_finding data stream already sets this field.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bugfix Pull request that fixes a bug issue Integration:wiz Wiz Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

5 participants