Skip to content

[ECS] Update SEI packages to ECS 8.10 (Part 5) #7961

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kgeller merged 3 commits into from
Sep 26, 2023
Merged

[ECS] Update SEI packages to ECS 8.10 (Part 5) #7961

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
7293f64
[entityanalytics_entra_id] - change to ECS version git@v8.10.0
kgeller Sep 25, 2023
a2d6e63
[qualys_vmdr] - change to ECS version git@v8.10.0
kgeller Sep 25, 2023
baf9e03
[trellix_edr_cloud] - change to ECS version git@v8.10.0
kgeller Sep 25, 2023
File filter

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion packages/entityanalytics_entra_id/_dev/build/build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
dependencies:
ecs:
reference: git@v8.9.0
reference: "git@v8.10.0"
5 changes: 5 additions & 0 deletions packages/entityanalytics_entra_id/changelog.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: 0.4.0
changes:
- description: ECS version updated to 8.10.0.
type: enhancement
link: https://github.com/elastic/integrations/pull/7961
- version: 0.3.0
changes:
- description: "The format_version in the package manifest changed from 2.11.0 to 3.0.0. Removed dotted YAML keys from package manifest. Added 'owner.type: elastic' to package manifest."
Expand Down
4 changes: 2 additions & 2 deletions ...ityanalytics_entra_id/data_stream/entity/_dev/test/pipeline/test-users.json-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@
]
},
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"event": {
"action": "user-discovered",
Expand Down Expand Up @@ -62,7 +62,7 @@
]
},
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"event": {
"action": "user-discovered",
Expand Down
2 changes: 1 addition & 1 deletion ...ges/entityanalytics_entra_id/data_stream/entity/elasticsearch/ingest_pipeline/default.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ description: Pipeline for processing Microsoft Entra ID user entities.
processors:
- set:
field: ecs.version
value: "8.9.0"
value: "8.10.0"

# Only user documents are currently supported.
- drop:
Expand Down
2 changes: 1 addition & 1 deletion packages/entityanalytics_entra_id/data_stream/entity/sample_event.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@
"type": "logs"
},
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"elastic_agent": {
"id": "a5d370e8-ae36-45f7-adbd-f22b984b979d",
Expand Down
2 changes: 1 addition & 1 deletion packages/entityanalytics_entra_id/docs/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,7 @@ An example event for `entity` looks as following:
"type": "logs"
},
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"elastic_agent": {
"id": "a5d370e8-ae36-45f7-adbd-f22b984b979d",
Expand Down
2 changes: 1 addition & 1 deletion packages/entityanalytics_entra_id/manifest.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
format_version: "3.0.0"
name: entityanalytics_entra_id
title: "Microsoft Entra ID Entity Analytics"
version: "0.3.0"
version: "0.4.0"
description: "Collect identities from Microsoft Entra ID (formerly Azure Active Directory) with Elastic Agent."
type: integration
categories:
Expand Down
2 changes: 1 addition & 1 deletion packages/qualys_vmdr/_dev/build/build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
dependencies:
ecs:
reference: git@v8.9.0
reference: "git@v8.10.0"
import_mappings: true
5 changes: 5 additions & 0 deletions packages/qualys_vmdr/changelog.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: 0.5.0
changes:
- description: ECS version updated to 8.10.0.
type: enhancement
link: https://github.com/elastic/integrations/pull/7961
- version: 0.4.0
changes:
- description: "The format_version in the package manifest changed from 2.11.0 to 3.0.0. Removed dotted YAML keys from package manifest. Added 'owner.type: elastic' to package manifest."
Expand Down
14 changes: 7 additions & 7 deletions ...tream/asset_host_detection/_dev/test/pipeline/test-asset-host-detection.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
}
},
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -222,7 +222,7 @@
},
{
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -335,7 +335,7 @@
},
{
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -453,7 +453,7 @@
},
{
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -565,7 +565,7 @@
},
{
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -635,7 +635,7 @@
},
{
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -731,7 +731,7 @@
}
},
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"event": {
"category": [
Expand Down
2 changes: 1 addition & 1 deletion ...es/qualys_vmdr/data_stream/asset_host_detection/elasticsearch/ingest_pipeline/default.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ processors:
- set:
field: ecs.version
tag: set_ecs_version
value: 8.9.0
value: 8.10.0
- set:
field: event.kind
tag: set_event_kind_1
Expand Down
2 changes: 1 addition & 1 deletion packages/qualys_vmdr/data_stream/asset_host_detection/sample_event.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@
"type": "logs"
},
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"elastic_agent": {
"id": "6b293533-5b3c-4cb2-a00c-b2b25ba9edec",
Expand Down
4 changes: 2 additions & 2 deletions ..._vmdr/data_stream/knowledge_base/_dev/test/pipeline/test-knowledge-base.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
{
"@timestamp": "2023-06-06T06:02:45.000Z",
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"event": {
"category": [
Expand Down Expand Up @@ -209,7 +209,7 @@
{
"@timestamp": "2023-06-06T06:02:45.000Z",
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"event": {
"category": [
Expand Down
2 changes: 1 addition & 1 deletion packages/qualys_vmdr/data_stream/knowledge_base/elasticsearch/ingest_pipeline/default.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ processors:
- set:
field: ecs.version
tag: set_ecs_version
value: 8.9.0
value: 8.10.0
- set:
field: event.kind
tag: set_event_kind_1
Expand Down
2 changes: 1 addition & 1 deletion packages/qualys_vmdr/data_stream/knowledge_base/sample_event.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@
"type": "logs"
},
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"elastic_agent": {
"id": "6b293533-5b3c-4cb2-a00c-b2b25ba9edec",
Expand Down
4 changes: 2 additions & 2 deletions packages/qualys_vmdr/docs/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -102,7 +102,7 @@ An example event for `asset_host_detection` looks as following:
"type": "logs"
},
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"elastic_agent": {
"id": "6b293533-5b3c-4cb2-a00c-b2b25ba9edec",
Expand Down Expand Up @@ -303,7 +303,7 @@ An example event for `knowledge_base` looks as following:
"type": "logs"
},
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"elastic_agent": {
"id": "6b293533-5b3c-4cb2-a00c-b2b25ba9edec",
Expand Down
2 changes: 1 addition & 1 deletion packages/qualys_vmdr/manifest.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
format_version: "3.0.0"
name: qualys_vmdr
title: Qualys VMDR
version: "0.4.0"
version: "0.5.0"
description: Collect data from Qualys VMDR platform with Elastic Agent.
type: integration
categories:
Expand Down
2 changes: 1 addition & 1 deletion packages/trellix_edr_cloud/_dev/build/build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
dependencies:
ecs:
reference: git@v8.9.0
reference: "git@v8.10.0"
import_mappings: true
5 changes: 5 additions & 0 deletions packages/trellix_edr_cloud/changelog.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: 0.4.0
changes:
- description: ECS version updated to 8.10.0.
type: enhancement
link: https://github.com/elastic/integrations/pull/7961
- version: 0.3.0
changes:
- description: "The format_version in the package manifest changed from 2.11.0 to 3.0.0. Removed dotted YAML keys from package manifest. Added 'owner.type: elastic' to package manifest."
Expand Down
2 changes: 1 addition & 1 deletion packages/trellix_edr_cloud/data_stream/event/_dev/test/pipeline/test-event.log-expected.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
"id": "D435435b0-BB33-4625-891E-XXXXXXX"
},
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"event": {
"action": "added",
Expand Down
2 changes: 1 addition & 1 deletion packages/trellix_edr_cloud/data_stream/event/elasticsearch/ingest_pipeline/default.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ processors:
- set:
field: ecs.version
tag: set_ecs_version
value: 8.9.0
value: 8.10.0
- set:
field: event.kind
tag: set_event_kind
Expand Down
2 changes: 1 addition & 1 deletion packages/trellix_edr_cloud/data_stream/event/sample_event.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@
"id": "D435435b0-BB33-4625-891E-XXXXXXX"
},
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"event": {
"action": "added",
Expand Down
2 changes: 1 addition & 1 deletion packages/trellix_edr_cloud/docs/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -129,7 +129,7 @@ An example event for `event` looks as following:
"id": "D435435b0-BB33-4625-891E-XXXXXXX"
},
"ecs": {
"version": "8.9.0"
"version": "8.10.0"
},
"event": {
"action": "added",
Expand Down
2 changes: 1 addition & 1 deletion packages/trellix_edr_cloud/manifest.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
format_version: "3.0.0"
name: trellix_edr_cloud
title: Trellix EDR Cloud
version: "0.3.0"
version: "0.4.0"
description: Collect logs from Trellix EDR Cloud with Elastic Agent.
type: integration
categories:
Expand Down