Skip to content

[TrendAI Deep Security] Map CEF Name to trendmicro.deep_security.malware.name for anti-malware events#19873

Merged
moxarth-rathod merged 2 commits into
elastic:mainfrom
moxarth-rathod:trendmicro-fix
Jul 9, 2026
Merged

[TrendAI Deep Security] Map CEF Name to trendmicro.deep_security.malware.name for anti-malware events#19873
moxarth-rathod merged 2 commits into
elastic:mainfrom
moxarth-rathod:trendmicro-fix

Conversation

@moxarth-rathod

@moxarth-rathod moxarth-rathod commented Jun 30, 2026

Copy link
Copy Markdown
Contributor

Proposed commit message

trendmicro: map CEF Name to dedicated malware name field for anti-malware events

Map the CEF Name value to trendmicro.deep_security.malware.name for anti-malware
events so malware and threat classifications remain searchable when deviceAction
overwrites event.action and duplicate-field cleanup removes trendmicro.deep_security.name.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

Related issues

@moxarth-rathod moxarth-rathod self-assigned this Jun 30, 2026
@moxarth-rathod
moxarth-rathod requested review from a team as code owners June 30, 2026 05:38
@moxarth-rathod moxarth-rathod added enhancement New feature or request Integration:trendmicro TrendAI Deep Security Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Team:SDE-Crest Crest developers on the Security Integrations team [elastic/sit-crest-contractors] labels Jun 30, 2026
@infra-vault-gh-plugin-prod

Copy link
Copy Markdown

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@github-actions

Copy link
Copy Markdown
Contributor

✅ Elastic Docs Style Checker (Vale)

No issues found on modified lines!


The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

@vera-review-bot

Copy link
Copy Markdown

👀 I have started reviewing the PR

@elastic-vault-github-plugin-prod

Copy link
Copy Markdown
Contributor

✅ All changelog entries have the correct PR link.

@vera-review-bot

Copy link
Copy Markdown

👀 I have started reviewing the PR

@vera-review-bot

Copy link
Copy Markdown

Vera Review Bot

For the current commit state, I did not find any issues.


🤖 AI-Generated Review | Vera Review Bot | 📚 Knowledge base: integration-skills

⚠️ Automated review — verify suggestions before applying.

@elastic-vault-github-plugin-prod

Copy link
Copy Markdown
Contributor

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@elasticmachine

Copy link
Copy Markdown

💚 Build Succeeded

cc @moxarth-rathod

@andrewkroh andrewkroh added the documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. label Jun 30, 2026

@efd6 efd6 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The issue in the description is not correct. Can you fix that? It should be #18660 AFAICS.

After that, LGTM

@moxarth-rathod
moxarth-rathod requested a review from efd6 July 8, 2026 11:20
@mergify

mergify Bot commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

  • Queue this pull request

@moxarth-rathod
moxarth-rathod merged commit f1696f7 into elastic:main Jul 9, 2026
10 checks passed
@elastic-vault-github-plugin-prod

Copy link
Copy Markdown
Contributor

Package trendmicro - 2.9.0 containing this change is available at https://epr.elastic.co/package/trendmicro/2.9.0/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. enhancement New feature or request Integration:trendmicro TrendAI Deep Security Team:SDE-Crest Crest developers on the Security Integrations team [elastic/sit-crest-contractors] Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Trend Micro Deep Security: map CEF Name to a dedicated malware name field for anti-malware events

4 participants