Skip to content

Commit

Permalink
all: document valid initial interval units.
Browse files Browse the repository at this point in the history
Not all acceptable units are listed, but rather choose commonly used units that
are already documented in other packages.

akamai, atlassian_bitbucket, atlassian_confluence, atlassian_jira,
cisco_secure_endpoint, cloudflare, forgerock, github, m365_defender,
microsoft_exchange_online_message_trace, okta, panw_cortex_xdr, slack,
ti_cybersixgill, ti_misp, tines, zerofox, zeronetworks
  • Loading branch information
efd6 committed Jun 27, 2023
1 parent ed42936 commit c819346
Show file tree
Hide file tree
Showing 52 changed files with 128 additions and 37 deletions.
5 changes: 5 additions & 0 deletions packages/akamai/changelog.yml
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "2.11.0"
changes:
- description: Document valid initial interval units.
type: enhancement
link: https://github.com/elastic/integrations/pull/6706
- version: "2.10.0"
changes:
- description: Ensure event.kind is correctly set for pipeline errors.
Expand Down
2 changes: 1 addition & 1 deletion packages/akamai/data_stream/siem/manifest.yml
Expand Up @@ -65,7 +65,7 @@ streams:
required: true
show_user: true
default: 24h
description: Initial interval to poll for events. Default is 24 hours.
description: "Initial interval to poll for events. Default is 24 hours. NOTE: Supported units for this parameter are h/m/s."
- name: proxy_url
type: text
title: Proxy URL
Expand Down
2 changes: 1 addition & 1 deletion packages/akamai/manifest.yml
@@ -1,6 +1,6 @@
name: akamai
title: Akamai
version: "2.10.0"
version: "2.11.0"
description: Collect logs from Akamai with Elastic Agent.
type: integration
format_version: 2.7.0
Expand Down
5 changes: 5 additions & 0 deletions packages/atlassian_bitbucket/changelog.yml
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.12.0"
changes:
- description: Document valid initial interval units.
type: enhancement
link: https://github.com/elastic/integrations/pull/6706
- version: "1.11.0"
changes:
- description: Ensure event.kind is correctly set for pipeline errors.
Expand Down
Expand Up @@ -108,7 +108,7 @@ streams:
multi: false
required: true
show_user: false
description: Initial interval for the first API call. Defaults to 24 hours.
description: "Initial interval for the first API call. Defaults to 24 hours. NOTE: Supported units for this parameter are h/m/s."
default: 24h
- name: ssl
type: yaml
Expand Down
2 changes: 1 addition & 1 deletion packages/atlassian_bitbucket/manifest.yml
@@ -1,7 +1,7 @@
format_version: 2.7.0
name: atlassian_bitbucket
title: Atlassian Bitbucket
version: "1.11.0"
version: "1.12.0"
description: Collect logs from Atlassian Bitbucket with Elastic Agent.
type: integration
categories:
Expand Down
5 changes: 5 additions & 0 deletions packages/atlassian_confluence/changelog.yml
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.13.0"
changes:
- description: Document valid initial interval units.
type: enhancement
link: https://github.com/elastic/integrations/pull/6706
- version: "1.12.0"
changes:
- description: Ensure event.kind is correctly set for pipeline errors.
Expand Down
Expand Up @@ -116,7 +116,7 @@ streams:
multi: false
required: true
show_user: false
description: Initial interval for the first API call. Defaults to 24 hours.
description: "Initial interval for the first API call. Defaults to 24 hours. NOTE: Supported units for this parameter are h/m/s."
default: 24h
- name: ssl
type: yaml
Expand Down
2 changes: 1 addition & 1 deletion packages/atlassian_confluence/manifest.yml
@@ -1,7 +1,7 @@
format_version: 2.7.0
name: atlassian_confluence
title: Atlassian Confluence
version: "1.12.0"
version: "1.13.0"
description: Collect logs from Atlassian Confluence with Elastic Agent.
type: integration
categories:
Expand Down
5 changes: 5 additions & 0 deletions packages/atlassian_jira/changelog.yml
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.13.0"
changes:
- description: Document valid initial interval units.
type: enhancement
link: https://github.com/elastic/integrations/pull/6706
- version: "1.12.0"
changes:
- description: Ensure event.kind is correctly set for pipeline errors.
Expand Down
2 changes: 1 addition & 1 deletion packages/atlassian_jira/data_stream/audit/manifest.yml
Expand Up @@ -116,7 +116,7 @@ streams:
multi: false
required: true
show_user: false
description: Initial interval for the first API call. Defaults to 24 hours.
description: "Initial interval for the first API call. Defaults to 24 hours. NOTE: Supported units for this parameter are h/m/s."
default: 24h
- name: ssl
type: yaml
Expand Down
2 changes: 1 addition & 1 deletion packages/atlassian_jira/manifest.yml
@@ -1,7 +1,7 @@
format_version: 2.7.0
name: atlassian_jira
title: Atlassian Jira
version: "1.12.0"
version: "1.13.0"
description: Collect logs from Atlassian Jira with Elastic Agent.
type: integration
categories:
Expand Down
5 changes: 5 additions & 0 deletions packages/cisco_secure_endpoint/changelog.yml
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "2.16.0"
changes:
- description: Document valid initial interval units.
type: enhancement
link: https://github.com/elastic/integrations/pull/6706
- version: "2.15.0"
changes:
- description: Ensure event.kind is correctly set for pipeline errors.
Expand Down
Expand Up @@ -61,7 +61,7 @@ streams:
multi: false
required: true
show_user: true
description: Initial Interval for first log pull
description: "Initial Interval for first log pull. NOTE: Supported units for this parameter are h/m/s."
default: 24h
- name: ssl
type: yaml
Expand Down
2 changes: 1 addition & 1 deletion packages/cisco_secure_endpoint/manifest.yml
@@ -1,7 +1,7 @@
format_version: 2.7.0
name: cisco_secure_endpoint
title: Cisco Secure Endpoint
version: "2.15.0"
version: "2.16.0"
description: Collect logs from Cisco Secure Endpoint (AMP) with Elastic Agent.
type: integration
categories:
Expand Down
5 changes: 5 additions & 0 deletions packages/cloudflare/changelog.yml
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "2.10.0"
changes:
- description: Document valid initial interval units.
type: enhancement
link: https://github.com/elastic/integrations/pull/6706
- version: "2.9.0"
changes:
- description: Ensure event.kind is correctly set for pipeline errors.
Expand Down
2 changes: 1 addition & 1 deletion packages/cloudflare/data_stream/audit/manifest.yml
Expand Up @@ -37,7 +37,7 @@ streams:
multi: false
required: true
show_user: false
description: Initial interval at which the logs will be pulled. Defaults to 30 days (720 hours). Max is 12960 hours (18 months).
description: "Initial interval at which the logs will be pulled. Defaults to 30 days (720 hours). Max is 12960 hours (18 months). NOTE: Supported units for this parameter are h/m/s."
default: 720h
- name: tags
type: text
Expand Down
2 changes: 1 addition & 1 deletion packages/cloudflare/manifest.yml
@@ -1,6 +1,6 @@
name: cloudflare
title: Cloudflare
version: "2.9.0"
version: "2.10.0"
description: Collect logs from Cloudflare with Elastic Agent.
type: integration
format_version: 2.7.0
Expand Down
5 changes: 5 additions & 0 deletions packages/forgerock/changelog.yml
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.4.0"
changes:
- description: Document valid initial interval units.
type: enhancement
link: https://github.com/elastic/integrations/pull/6706
- version: "1.3.1"
changes:
- description: Fix IDM Activity revision field type.
Expand Down
4 changes: 2 additions & 2 deletions packages/forgerock/manifest.yml
@@ -1,6 +1,6 @@
name: forgerock
title: "ForgeRock"
version: "1.3.1"
version: "1.4.0"
release: ga
license: basic
description: Collect audit logs from ForgeRock with Elastic Agent.
Expand Down Expand Up @@ -66,7 +66,7 @@ policy_templates:
- name: initial_interval
type: text
title: Initial Interval
description: How far back to pull logs from ForgeRock. Can not be longer than 24 hours.
description: "How far back to pull logs from ForgeRock. Can not be longer than 24 hours. NOTE: Supported units for this parameter are h/m/s."
multi: false
required: true
show_user: true
Expand Down
5 changes: 5 additions & 0 deletions packages/github/changelog.yml
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.14.0"
changes:
- description: Document valid initial interval units.
type: enhancement
link: https://github.com/elastic/integrations/pull/6706
- version: "1.13.0"
changes:
- description: Ensure event.kind is correctly set for pipeline errors.
Expand Down
2 changes: 1 addition & 1 deletion packages/github/data_stream/audit/manifest.yml
Expand Up @@ -39,7 +39,7 @@ streams:
required: true
show_user: true
default: 730h # 30 days
description: Initial interval to poll for events. Default is 730 hours (30 days).
description: "Initial interval to poll for events. Default is 730 hours (30 days). NOTE: Supported units for this parameter are h/m/s."
- name: api_url
type: text
title: API URL.
Expand Down
2 changes: 1 addition & 1 deletion packages/github/manifest.yml
@@ -1,6 +1,6 @@
name: github
title: GitHub
version: "1.13.0"
version: "1.14.0"
release: ga
description: Collect logs from GitHub with Elastic Agent.
type: integration
Expand Down
5 changes: 5 additions & 0 deletions packages/m365_defender/changelog.yml
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.12.0"
changes:
- description: Document valid initial interval units.
type: enhancement
link: https://github.com/elastic/integrations/pull/6706
- version: "1.11.1"
changes:
- description: Fix event.query type to group
Expand Down
2 changes: 1 addition & 1 deletion packages/m365_defender/data_stream/log/manifest.yml
Expand Up @@ -21,7 +21,7 @@ streams:
required: true
show_user: true
default: 168h
description: How far back in time to look for alerts the first time running. Default is 1 week.
description: "How far back in time to look for alerts the first time running. Default is 1 week. NOTE: Supported units for this parameter are h/m/s."
- name: request_url
type: text
title: API URL Endpoint
Expand Down
2 changes: 1 addition & 1 deletion packages/m365_defender/manifest.yml
@@ -1,7 +1,7 @@
format_version: 1.0.0
name: m365_defender
title: Microsoft M365 Defender
version: "1.11.1"
version: "1.12.0"
description: Collect logs from Microsoft M365 Defender with Elastic Agent.
categories:
- "security"
Expand Down
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.6.0"
changes:
- description: Document valid initial interval units.
type: enhancement
link: https://github.com/elastic/integrations/pull/6706
- version: "1.5.0"
changes:
- description: Ensure event.kind is correctly set for pipeline errors.
Expand Down
4 changes: 2 additions & 2 deletions packages/microsoft_exchange_online_message_trace/manifest.yml
@@ -1,7 +1,7 @@
format_version: 1.0.0
name: microsoft_exchange_online_message_trace
title: "Microsoft Exchange Online Message Trace"
version: "1.5.0"
version: "1.6.0"
release: ga
license: basic
description: "Microsoft Exchange Online Message Trace Integration"
Expand Down Expand Up @@ -120,7 +120,7 @@ policy_templates:
- name: initial_interval
type: text
title: Initial Interval
description: How far back to pull the initial log from Exchange Online
description: "How far back to pull the initial log from Exchange Online. NOTE: Supported units for this parameter are h/m/s."
default: 1h
multi: false
required: true
Expand Down
5 changes: 5 additions & 0 deletions packages/okta/changelog.yml
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.23.0"
changes:
- description: Document valid initial interval units.
type: enhancement
link: https://github.com/elastic/integrations/pull/6706
- version: "1.22.1"
changes:
- description: Fix a concurrent modification exception that occurred while modifying okta.target[].detailEntry.
Expand Down
3 changes: 2 additions & 1 deletion packages/okta/manifest.yml
@@ -1,6 +1,6 @@
name: okta
title: Okta
version: "1.22.1"
version: "1.23.0"
release: ga
description: Collect and parse event logs from Okta API with Elastic Agent.
type: integration
Expand Down Expand Up @@ -59,6 +59,7 @@ policy_templates:
required: true
show_user: true
default: 24h
description: "Initial Interval for first log pull. NOTE: Supported units for this parameter are h/m/s."
- name: ssl
type: yaml
title: SSL
Expand Down
5 changes: 5 additions & 0 deletions packages/panw_cortex_xdr/changelog.yml
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.13.0"
changes:
- description: Document valid initial interval units.
type: enhancement
link: https://github.com/elastic/integrations/pull/6706
- version: "1.12.0"
changes:
- description: Ensure event.kind is correctly set for pipeline errors.
Expand Down
2 changes: 1 addition & 1 deletion packages/panw_cortex_xdr/data_stream/alerts/manifest.yml
Expand Up @@ -63,7 +63,7 @@ streams:
required: true
show_user: true
default: 24h
description: How far back in time to look for alerts the first time running.
description: "How far back in time to look for alerts the first time running. NOTE: Supported units for this parameter are h/m/s."
- name: ssl
type: yaml
title: SSL
Expand Down
2 changes: 1 addition & 1 deletion packages/panw_cortex_xdr/manifest.yml
@@ -1,6 +1,6 @@
name: panw_cortex_xdr
title: Palo Alto Cortex XDR
version: "1.12.0"
version: "1.13.0"
release: ga
description: Collect logs from Palo Alto Cortex XDR with Elastic Agent.
type: integration
Expand Down
5 changes: 5 additions & 0 deletions packages/slack/changelog.yml
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.7.0"
changes:
- description: Document valid initial interval units.
type: enhancement
link: https://github.com/elastic/integrations/pull/6706
- version: "1.6.0"
changes:
- description: Ensure error.message is correctly set for pipeline errors.
Expand Down
2 changes: 1 addition & 1 deletion packages/slack/data_stream/audit/manifest.yml
Expand Up @@ -24,7 +24,7 @@ streams:
multi: false
required: true
show_user: false
description: Initial interval at which the logs will be pulled. Defaults to 30 days (720 hours).
description: "Initial interval at which the logs will be pulled. Defaults to 30 days (720 hours). NOTE: Supported units for this parameter are h/m/s."
default: 720h
- name: limit
type: integer
Expand Down
2 changes: 1 addition & 1 deletion packages/slack/manifest.yml
@@ -1,7 +1,7 @@
format_version: 1.0.0
name: slack
title: "Slack Logs"
version: "1.6.0"
version: "1.7.0"
license: basic
release: ga
description: "Slack Logs Integration"
Expand Down
5 changes: 5 additions & 0 deletions packages/ti_cybersixgill/changelog.yml
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.14.0"
changes:
- description: Document valid initial interval units.
type: enhancement
link: https://github.com/elastic/integrations/pull/6706
- version: "1.13.0"
changes:
- description: Ensure event.kind is correctly set for pipeline errors.
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_cybersixgill/data_stream/threat/manifest.yml
Expand Up @@ -57,7 +57,7 @@ streams:
required: true
show_user: false
default: 2160h
description: How far back to look for indicators the first time the agent is started.
description: "How far back to look for indicators the first time the agent is started. NOTE: Supported units for this parameter are h/m/s."
- name: ssl
type: yaml
title: SSL
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_cybersixgill/manifest.yml
@@ -1,6 +1,6 @@
name: ti_cybersixgill
title: Cybersixgill
version: "1.13.0"
version: "1.14.0"
release: ga
description: Ingest threat intelligence indicators from Cybersixgill with Elastic Agent.
type: integration
Expand Down
5 changes: 5 additions & 0 deletions packages/ti_misp/changelog.yml
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "1.17.0"
changes:
- description: Document valid initial interval units.
type: enhancement
link: https://github.com/elastic/integrations/pull/6706
- version: "1.16.1"
changes:
- description: Keep the same timestamp for later pages in a pagination sequence.
Expand Down

0 comments on commit c819346

Please sign in to comment.