Checkpoint Filebeat Module

[andrewstucki]

What does this PR do?

Imports and implements the Checkpoint filebeat module

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all datasets collect metrics or logs.

Screenshots

[elasticmachine]

Pinging @elastic/integrations (Team:Integrations)

[elasticmachine]

Pinging @elastic/siem (Team:SIEM)

[elasticmachine]

💚 Build Succeeded

Expand to view the summary

Build stats

• Build Cause: [Pull request #220 updated]

• Start Time: 2020-08-05T14:56:27.195+0000

• Duration: 5 min 19 sec

Steps errors

Expand to view the steps failures

• Name: Check out from version control

  • Description: [2020-08-05T14:57:32.317Z] using credential f6c7695a-671e-4f4f-a331-acdce44ff9ba
    [2020-08-05T14:57:

  • Duration: 2 min 13 sec

  • Start Time: 2020-08-05T14:57:29.807+0000

  • log

[andrewstucki]

@andrewkroh do you happen to know if the syslog input adds any implicit fields like the logfile input by any chance? Checking the configuration only through the file input, so not entirely sure if I'm missing anything.

[mtojek]

LGTM

I think it would be much more convenient for you to review integrations inside the team. You don't need specifically our approvals (Nicolas, me) on this. We can verify the package format, but can't say too much about pipeline definitions.

[andrewstucki]

You don't need specifically our approvals (Nicolas, me) on this. We can verify the package format, but can't say too much about pipeline definitions.

Sure thing, wasn't sure if you guys wanted to verify the first few packages coming from us or not to make sure we weren't doing something dumb 😅 , but definitely don't want to bombard you with like 20+ reviews for our team.

[mtojek]

No worries, I saw you perform well with integrations, so need to check on them. Small request on my side: could you please configure your GH team (elastic/security-ingest) to have write perms to the package-storage? We configured a bot responsible for transferring changes from integrations to the package-storage.