ti_misp: fix timestamp format sent to API

[efd6]

What does this PR do?

This make the timestamp be sent as unix seconds, rather than time.UnixDate. Also add constraint on test server to match the API definition.

API: https://www.misp-project.org/openapi/#tag/Events/operation/restSearchEvents

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.

Author's Checklist

• [ ]

How to test this PR locally

Related issues

• Fixes [ti_misp] Incorrect initial timestamp format #6474

Screenshots

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Start Time: 2023-06-06T01:52:54.255+0000

• Duration: 15 min 7 sec

Test stats 🧪

Test	Results
Failed	0
Passed	15
Skipped	0
Total	15

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

• /test : Re-trigger the build.

[elasticmachine]

🌐 Coverage report

Name	Metrics % (covered/total)	Diff
Packages	100.0% (2/2)	💚
Files	100.0% (2/2)	💚 6.25
Classes	100.0% (2/2)	💚 6.25
Methods	100.0% (30/30)	💚 14.079
Lines	86.344% (607/703)	👍 0.419
Conditionals	100.0% (0/0)	💚

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

[andrewkroh]

LGTM. I verified the initial requests contain unix timestamps.

  "event.original": "POST /events/restSearch HTTP/1.1\r\nHost: host.docker.internal\r\nUser-Agent: Elastic-Filebeat/8.7.1 (linux; amd64; bda40535cf0743b97017512e6af6d661eeef956e; 2023-04-23 04:33:29 +0000 UTC)\r\nContent-Length: 72\r\nAccept: application/json\r\nAuthorization: hM1it4KA56pLDW5jJmlXTKZMsFV9RBpeSj3ZCu1Z\r\nContent-Type: application/json\r\nAccept-Encoding: gzip\r\n\r\n{\"limit\":\"10\",\"page\":\"1\",\"returnFormat\":\"json\",\"timestamp\":\"1685623795\"}",

  "event.original": "POST /attributes/restSearch HTTP/1.1\r\nHost: host.docker.internal\r\nUser-Agent: Elastic-Filebeat/8.7.1 (linux; amd64; bda40535cf0743b97017512e6af6d661eeef956e; 2023-04-23 04:33:29 +0000 UTC)\r\nContent-Length: 72\r\nAccept: application/json\r\nAuthorization: hM1it4KA56pLDW5jJmlXTKZMsFV9RBpeSj3ZCu1Z\r\nContent-Type: application/json\r\nAccept-Encoding: gzip\r\n\r\n{\"limit\":\"10\",\"page\":\"1\",\"returnFormat\":\"json\",\"timestamp\":\"1685623788\"}",

[elasticmachine]

Package ti_misp - 1.15.1 containing this change is available at https://epr.elastic.co/search?package=ti_misp