-
Notifications
You must be signed in to change notification settings - Fork 444
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[o365_audit] Add NewValue field #5115
Conversation
Pinging @elastic/security-external-integrations (Team:Security-External Integrations) |
🌐 Coverage report
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
@efd6 Anything else on this PR? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks
👋 @efd6 For this the changelog shows that the minor has been already bumped by another Pr. Should I update the minor again or patch version? |
Bump the minor, 1.12.0. |
Package o365 - 1.12.0 containing this change is available at https://epr.elastic.co/search?package=o365 |
Adds the
o365.audit.NewValue
field. It is present in the filebeat pipeline.js and available for use in a query (per the screenshot), but not defined in either Beats or the Elastic Agent integration mappings.What does this PR do?
Updates the
fields.yml
to include the field.Checklist
changelog.yml
file.