[Cybereason] Add system test coverage - #17017
Merged
moxarth-rathod merged 2 commits intoJan 27, 2026
Merged
Conversation
moxarth-rathod
added
enhancement
|
Pinging @elastic/security-service-integrations (Team:Security-Service Integrations) |
Contributor
🚀 Benchmarks reportPackage
|
| Data stream | Previous EPS | New EPS | Diff (%) | Result |
|---|---|---|---|---|
malop_process |
805.15 | 451.06 | -354.09 (-43.98%) | 💔 |
malware |
10526.32 | 8000 | -2526.32 (-24%) | 💔 |
To see the full report comment with /test benchmark fullreport
andrewkroh
added
the
documentation
efd6
reviewed
Jan 22, 2026
efd6
left a comment
efd6
left a comment
Contributor
There was a problem hiding this comment.
Please fix the commit message. At the moment it does not make any comment on the test addition. The work here is more complex than the proposed commit message would suggest. There are new test samples in the docker config, so the origin of these should be described in the commit message.
Co-authored-by: Dan Kortschak <dan.kortschak@elastic.co>
💚 Build Succeeded
History
|
efd6
reviewed
Jan 22, 2026
efd6
left a comment
efd6
left a comment
Contributor
There was a problem hiding this comment.
Suggest:
cybereason: add system tests and increase base64 icon field limits to 4096
Add system tests for all data streams.
Also address field indexing issues identified by the new tests where
base64-encoded icons were being ignored due to insufficient field
length limits. The limits are increased from the default to 4096
characters for icon-related fields in suspicions_process and
malop_process data streams.
Test logs were generated from existing pipeline test logs.
Contributor
|
Package cybereason - 1.4.1 containing this change is available at https://epr.elastic.co/package/cybereason/1.4.1/ |
jakubgalecki0
pushed a commit
to jakubgalecki0/integrations
that referenced
this pull request
Feb 19, 2026
cybereason: add system tests and increase base64 icon field limits to 4096 Add system tests for all data streams. Also address field indexing issues identified by the new tests where base64-encoded icons were being ignored due to insufficient field length limits. The limits are increased from the default to 4096 characters for icon-related fields in suspicions_process and malop_process data streams. Test logs were generated from existing pipeline test logs.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Proposed commit message
Checklist
changelog.ymlfile.Related issues