New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Zscaler ZPA] Add dynamic mapping and resolve issue related to ECS field #5409
[Zscaler ZPA] Add dynamic mapping and resolve issue related to ECS field #5409
Conversation
🌐 Coverage report
|
Pinging @elastic/security-external-integrations (Team:Security-External Integrations) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Minor comment. LGTM 👍🏼
Thanks!
value: '{{{json.PublicIP}}}' | ||
if: ctx?.json?.PublicIP != null | ||
allow_duplicates: false | ||
ignore_failure: true |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you avoid ignore_failure
Package zscaler_zpa - 1.5.1 containing this change is available at https://epr.elastic.co/search?package=zscaler_zpa |
…eld (elastic#5409) * Add dynamic mapping and resolve issue related to ECS field * Update changelog entry * Update manifest file
…eld (elastic#5409) * Add dynamic mapping and resolve issue related to ECS field * Update changelog entry * Update manifest file
Type of change
What does this PR do?
event.created
ECS fieldChecklist
How to test this PR locally
Related issues
event.created
in audit logs #5346Screenshots