-
Notifications
You must be signed in to change notification settings - Fork 515
Closed
Labels
Description
Purpose
BBOT v2.x has now been available for a number of months and is in production use by many users.
Significant JSON structure and field changes have occurred in the BBOT output modules that necessitates an Elastic integration update.
An update is required that guarantees backwards compatibility with existing BBOX v1.x data as well as new BBOT v2.x data such that it is searchable and not documents are excluded from search results.
HTTP webhook (filebeat http_endpoint) style inputs should be added to the integration to complement the BBOT http output module.
All changes
- Change follows the contributing guidelines
- Supported versions of the monitoring target are documented
- Supported operating systems are documented (if applicable)
- Integration or System tests exist
- Documentation exists, useful guidelines to follow
- Fields follow ECS and naming conventions
- At least a manual test with ES / Kibana / Agent has been performed.
- Required Kibana version set to: 8.13.0
Log dataset changes
- Pipeline tests exist (if applicable)
- Generated output for at least 1 log file exists