ti_google_threat_intelligence: update default initial interval

[chemamartinez]

Proposed commit message

API specifications for Google Threat Lists changed the availability time range of generated lists from one hour to two hours back.

Threat Lists are hourly generated as IoCs packages, with 2 hours difference from the current time. This means that if the current time in UTC is T you can get T-2h Threat List but any more recent than that.

Default initial intervals have been updated to align with that requirement.

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.
• I have verified that any added dashboard complies with Kibana's Dashboard good practices

[elasticmachine]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

[elastic-vault-github-plugin-prod]

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

[kcreddy]

LGTM.
For initial_interval and interval, we should consider the duration type with min_duration option to help with such validations.

[chemamartinez]

Thanks, @kcreddy

For initial_interval and interval, we should consider the duration type with min_duration option to help with such validations.

It is a good point, the problem I see right now is that would force the integration to bump its minimum Kibana version to 9.2.0, and this is related to an SDH so I'd wait to add this change for now.

[kcreddy]

Suggested change

	"User-Agent": ["v0.7.0"], // Keep this in sync with 'version' in package level manifest.yml.
	"User-Agent": ["v0.8.0"], // Keep this in sync with 'version' in package level manifest.yml.

Nit.
@chemamartinez, please update them accordingly.

[chemamartinez]

Thank you for the reminder!

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: cb77e7c

History

• 💚 Build #34928 succeeded 9953a03
• 💚 Build #34743 succeeded 90c1f0d

cc @chemamartinez

[elastic-vault-github-plugin-prod]

Package ti_google_threat_intelligence - 0.8.0 containing this change is available at https://epr.elastic.co/package/ti_google_threat_intelligence/0.8.0/