Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a Fingerprint processor for Non-repudiation #11173

Closed
woodywalton opened this issue Mar 9, 2019 · 0 comments · Fixed by #14205
Closed

Add a Fingerprint processor for Non-repudiation #11173

woodywalton opened this issue Mar 9, 2019 · 0 comments · Fixed by #14205

Comments

@woodywalton
Copy link

Add a new processor to Filebeat, perhaps similar to the Logstash Fingerprint plugin, that captures the
initial values that were extracted from the entry and stores them in the indexed document as a hash value for later validation (and any changes will be fully monitored & audited).

This capability would be required for systems that serve as systems of record for legal evidence and must maintain "chain of custody" (non-repudiation) in proving data integrity. The original file would be saved off to long-term storage and could be validated later by using the same fingerprinting process on the original file by comparing to the saved initial value.

@woodywalton woodywalton added the Filebeat Filebeat label Mar 9, 2019
@ph ph changed the title [Filebeat] Add a Fingerprint processor for Non-repudiation Add a Fingerprint processor for Non-repudiation Mar 11, 2019
@ph ph removed the Filebeat Filebeat label Mar 11, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants