Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ECS] Update SEI packages to ECS 8.10 (Part 4) #7920

Merged
merged 25 commits into from
Sep 22, 2023

Conversation

kgeller
Copy link
Contributor

@kgeller kgeller commented Sep 21, 2023

What does this PR do?

Updates the following SEI packages to ECS version 8.10:

  • tanium
  • tcp
  • tenable_io
  • thycotic_ss
  • ti_abusech
  • ti_anomali
  • ti_cif3
  • ti_cybersixgill
  • ti_misp
  • ti_otx
  • ti_recordedfuture
  • ti_threatq
  • tines
  • trellix_epo_cloud
  • trend_micro_vision_one
  • trendmicro
  • udp
  • vectra_detect
  • winlog
  • zeek
  • zerofox
  • zeronetworks
  • zoom
  • zscaler_zia
  • zscaler_zpa

Changes generated by:

go run github.com/andrewkroh/go-examples/ecs-update@main -owner elastic/security-external-integrations -ecs-version=8.10.0 -ecs-git-ref=v8.10.0 -pr 7920 packages/<PACKAGE>

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.

Related issues

ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/tanium
@kgeller kgeller self-assigned this Sep 21, 2023
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The
ecs.version in sample_event.json files was changed to 8.10.0. Previously
sample_event.json files contained 8.2.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/tcp
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/tenable_io
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/thycotic_ss
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/ti_abusech
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/ti_anomali
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/ti_cif3
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/ti_cybersixgill
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/ti_misp
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/ti_otx
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/ti_recordedfuture
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/ti_threatq
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The
ecs.version in sample_event.json files was changed to 8.10.0. Previously
sample_event.json files contained 8.0.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/tines
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/trellix_epo_cloud
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/trend_micro_vision_one
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/trendmicro
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The
ecs.version in sample_event.json files was changed to 8.10.0. Previously
sample_event.json files contained 8.2.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/udp
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/vectra_detect
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/winlog
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/zeek
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/zerofox
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The
ecs.version in sample_event.json files was changed to 8.10.0. Previously
sample_event.json files contained 8.0.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/zeronetworks
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/zoom
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/zscaler_zia
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7920 packages/zscaler_zpa
@elasticmachine
Copy link

elasticmachine commented Sep 21, 2023

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS
Pipeline View Test View Changes Artifacts preview preview

Expand to view the summary

Build stats

  • Start Time: 2023-09-21T17:13:05.207+0000

  • Duration: 61 min 47 sec

Test stats 🧪

Test Results
Failed 0
Passed 617
Skipped 0
Total 617

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

  • /test : Re-trigger the build.

@elasticmachine
Copy link

elasticmachine commented Sep 21, 2023

🌐 Coverage report

Name Metrics % (covered/total) Diff
Packages 100.0% (89/89) 💚
Files 93.631% (147/157) 👎 -6.369
Classes 93.631% (147/157) 👎 -6.369
Methods 93.21% (1414/1517) 👍 33.21
Lines 90.025% (25506/28332) 👎 -9.975
Conditionals 100.0% (0/0) 💚

@kgeller
Copy link
Contributor Author

kgeller commented Sep 21, 2023

/test

@kgeller kgeller marked this pull request as ready for review September 21, 2023 19:35
@elasticmachine
Copy link

Package ti_anomali - 1.18.0 containing this change is available at https://epr.elastic.co/search?package=ti_anomali

@elasticmachine
Copy link

Package ti_cif3 - 1.7.0 containing this change is available at https://epr.elastic.co/search?package=ti_cif3

@elasticmachine
Copy link

Package ti_cybersixgill - 1.22.0 containing this change is available at https://epr.elastic.co/search?package=ti_cybersixgill

@elasticmachine
Copy link

Package ti_misp - 1.24.0 containing this change is available at https://epr.elastic.co/search?package=ti_misp

@elasticmachine
Copy link

Package ti_otx - 1.18.0 containing this change is available at https://epr.elastic.co/search?package=ti_otx

@elasticmachine
Copy link

Package ti_recordedfuture - 1.17.0 containing this change is available at https://epr.elastic.co/search?package=ti_recordedfuture

@elasticmachine
Copy link

Package ti_threatq - 1.19.0 containing this change is available at https://epr.elastic.co/search?package=ti_threatq

@elasticmachine
Copy link

Package tines - 1.5.0 containing this change is available at https://epr.elastic.co/search?package=tines

@elasticmachine
Copy link

Package trellix_epo_cloud - 1.6.0 containing this change is available at https://epr.elastic.co/search?package=trellix_epo_cloud

@elasticmachine
Copy link

Package trend_micro_vision_one - 1.9.0 containing this change is available at https://epr.elastic.co/search?package=trend_micro_vision_one

@elasticmachine
Copy link

Package trendmicro - 1.4.0 containing this change is available at https://epr.elastic.co/search?package=trendmicro

@elasticmachine
Copy link

Package udp - 1.15.0 containing this change is available at https://epr.elastic.co/search?package=udp

@elasticmachine
Copy link

Package vectra_detect - 1.4.0 containing this change is available at https://epr.elastic.co/search?package=vectra_detect

@elasticmachine
Copy link

Package winlog - 1.20.0 containing this change is available at https://epr.elastic.co/search?package=winlog

@elasticmachine
Copy link

Package zeek - 2.17.0 containing this change is available at https://epr.elastic.co/search?package=zeek

@elasticmachine
Copy link

Package zerofox - 1.18.0 containing this change is available at https://epr.elastic.co/search?package=zerofox

@elasticmachine
Copy link

Package zeronetworks - 1.7.0 containing this change is available at https://epr.elastic.co/search?package=zeronetworks

@elasticmachine
Copy link

Package zoom - 1.17.0 containing this change is available at https://epr.elastic.co/search?package=zoom

@elasticmachine
Copy link

Package zscaler_zia - 2.15.0 containing this change is available at https://epr.elastic.co/search?package=zscaler_zia

@elasticmachine
Copy link

Package zscaler_zpa - 1.14.0 containing this change is available at https://epr.elastic.co/search?package=zscaler_zpa

@andrewkroh andrewkroh added Integration:ti_otx AlienVault OTX Integration:tanium Tanium Integration:tenable_io Tenable Vulnerability Management Integration:ti_abusech AbuseCH Integration:ti_cybersixgill Cybersixgill Integration:ti_misp MISP Integration:tcp Custom TCP Logs Integration:thycotic_ss Thycotic Secret Server Integration:ti_anomali Anomali Integration:ti_cif3 Collective Intelligence Framework v3 labels Jul 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Integration:tanium Tanium Integration:tcp Custom TCP Logs Integration:tenable_io Tenable Vulnerability Management Integration:thycotic_ss Thycotic Secret Server Integration:ti_abusech AbuseCH Integration:ti_anomali Anomali Integration:ti_cif3 Collective Intelligence Framework v3 Integration:ti_cybersixgill Cybersixgill Integration:ti_misp MISP Integration:ti_otx AlienVault OTX
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants