Skip to content

[wiz] Add Filters to Retrieve all Types of Vulnerabilities #14664

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
efd6 merged 6 commits into from
Aug 6, 2025
+24 −1
Merged

[wiz] Add Filters to Retrieve all Types of Vulnerabilities #14664

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
7fc7a48
Add filters to retrieve all types of vulnerabilities in the vulnerabi…
mohitjha-elastic Jul 23, 2025
2d78339
Update changelog entry
mohitjha-elastic Jul 23, 2025
3366907
Add toggle to fetch all kinds of vulnerability.
mohitjha-elastic Jul 30, 2025
bc279a8
Update changelog description.
mohitjha-elastic Jul 30, 2025
efc3134
Update status filter condition in vulnerability data stream.
mohitjha-elastic Aug 1, 2025
a7652fc
Update description of include_all_vulnerability toggle in manifest.
mohitjha-elastic Aug 4, 2025
File filter

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions packages/wiz/changelog.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "3.7.0"
changes:
- description: Add configurable toggle to include all vulnerability statuses in the vulnerability dataset.
type: enhancement
link: https://github.com/elastic/integrations/pull/14664
- version: "3.6.0"
changes:
- description: Add troubleshooting note in README on `event.ingested` requirement for standalone Elastic Agent.
Expand Down
8 changes: 8 additions & 0 deletions packages/wiz/data_stream/vulnerability/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,13 @@ state:
initial_interval: {{initial_interval}}
want_more: false
batch_size: {{batch_size}}
{{#if include_all_vulnerability}}
want_status:
- RESOLVED
- OPEN
- REJECTED
- IN_PROGRESS
{{/if}}
query: >-
query VulnerabilityFindingsPage($filterBy: VulnerabilityFindingFilters $first: Int $after: String $orderBy: VulnerabilityFindingOrder) {
vulnerabilityFindings(filterBy: $filterBy first: $first after: $after orderBy: $orderBy) {
Expand Down Expand Up @@ -140,6 +147,7 @@ program: |
"first": state.batch_size,
"after": state.?end_cursor.value.orValue(null),
"filterBy": {
?"status": state.?want_status,
"updatedAt": {
"after": state.want_more ?
state.?cursor.first_timestamp.orValue(null)
Expand Down
10 changes: 10 additions & 0 deletions packages/wiz/data_stream/vulnerability/manifest.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,16 @@ streams:
description: Collect Vulnerability logs from Wiz.
template_path: cel.yml.hbs
vars:
- name: include_all_vulnerability
required: true
show_user: true
title: Include All Vulnerability Statuses
description: >-
Enable this toggle to fetch all types of vulnerabilities, including those with statuses RESOLVED, OPEN, REJECTED, and IN_PROGRESS.
By default, the API's default filter is used.
type: bool
multi: false
default: false
- name: initial_interval
type: text
title: Initial Interval
Expand Down
2 changes: 1 addition & 1 deletion packages/wiz/manifest.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
format_version: 3.4.0
name: wiz
title: Wiz
version: "3.6.0"
version: "3.7.0"
description: Collect logs from Wiz with Elastic Agent.
type: integration
categories:
Expand Down