Skip to content

Conversation

@kgeller
Copy link
Contributor

@kgeller kgeller commented Sep 21, 2023

What does this PR do?

Updates the following SEI packages to ECS version 8.10:

  • m365_defender
  • mattermost
  • microsoft_defender_cloud
  • microsoft_dhcp
  • microsoft_exchange_online_message_trace
  • mimecast
  • modsecurity
  • mysql_enterprise
  • netflow
  • netscout
  • netskope
  • network_traffic
  • o365
  • osquery
  • panw
  • panw_cortex_xdr
  • pulse_connect_secure
  • qnap_nas
  • radware
  • rapid7_insightvm
  • santa
  • sentinel_one
  • sentinel_one_cloud_funnel
  • snort
  • snyk
  • sonicwall_firewall
  • sophos
  • sophos_central
  • squid
  • suricata
  • symantec_endpoint
  • sysmon_linux
  • system_audit

Changes generated by:

go install github.com/andrewkroh/go-examples/elastic-package-changelog@main
go run github.com/andrewkroh/go-examples/ecs-update@main -owner elastic/security-external-integrations -ecs-version=8.10.0 -ecs-git-ref=v8.10.0 -pr 7919 packages/<PACKAGE>

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.

Related issues

ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/m365_defender
@kgeller kgeller self-assigned this Sep 21, 2023
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/mattermost
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/microsoft_defender_cloud
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/microsoft_dhcp
…@v8.10.0

ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/microsoft_exchange_online_message_trace
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/mimecast
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/modsecurity
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/mysql_enterprise
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/netflow
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/netscout
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/netskope
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/network_traffic
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/o365
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/osquery
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/panw
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/panw_cortex_xdr
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/pulse_connect_secure
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/qnap_nas
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/radware
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/rapid7_insightvm
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/santa
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/sentinel_one
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/sentinel_one_cloud_funnel
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/snort
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/snyk
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/sonicwall_firewall
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/sophos
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/sophos_central
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/squid
@elasticmachine
Copy link

Package panw - 3.17.0 containing this change is available at https://epr.elastic.co/search?package=panw

@elasticmachine
Copy link

Package panw_cortex_xdr - 1.21.0 containing this change is available at https://epr.elastic.co/search?package=panw_cortex_xdr

@elasticmachine
Copy link

Package pulse_connect_secure - 1.15.0 containing this change is available at https://epr.elastic.co/search?package=pulse_connect_secure

@elasticmachine
Copy link

Package qnap_nas - 1.16.0 containing this change is available at https://epr.elastic.co/search?package=qnap_nas

@elasticmachine
Copy link

Package radware - 0.17.0 containing this change is available at https://epr.elastic.co/search?package=radware

@elasticmachine
Copy link

Package rapid7_insightvm - 1.5.0 containing this change is available at https://epr.elastic.co/search?package=rapid7_insightvm

@elasticmachine
Copy link

Package santa - 3.14.0 containing this change is available at https://epr.elastic.co/search?package=santa

@elasticmachine
Copy link

Package sentinel_one - 1.14.0 containing this change is available at https://epr.elastic.co/search?package=sentinel_one

@elasticmachine
Copy link

Package sentinel_one_cloud_funnel - 0.6.0 containing this change is available at https://epr.elastic.co/search?package=sentinel_one_cloud_funnel

@elasticmachine
Copy link

Package snort - 1.12.0 containing this change is available at https://epr.elastic.co/search?package=snort

@elasticmachine
Copy link

Package snyk - 1.16.0 containing this change is available at https://epr.elastic.co/search?package=snyk

@elasticmachine
Copy link

Package sonicwall_firewall - 1.11.0 containing this change is available at https://epr.elastic.co/search?package=sonicwall_firewall

@elasticmachine
Copy link

Package sophos - 3.4.0 containing this change is available at https://epr.elastic.co/search?package=sophos

@elasticmachine
Copy link

Package sophos_central - 1.10.0 containing this change is available at https://epr.elastic.co/search?package=sophos_central

@elasticmachine
Copy link

Package squid - 0.18.0 containing this change is available at https://epr.elastic.co/search?package=squid

@elasticmachine
Copy link

Package suricata - 2.17.0 containing this change is available at https://epr.elastic.co/search?package=suricata

@elasticmachine
Copy link

Package symantec_endpoint - 2.13.0 containing this change is available at https://epr.elastic.co/search?package=symantec_endpoint

@elasticmachine
Copy link

Package sysmon_linux - 1.4.0 containing this change is available at https://epr.elastic.co/search?package=sysmon_linux

@elasticmachine
Copy link

Package system_audit - 1.9.0 containing this change is available at https://epr.elastic.co/search?package=system_audit

@andrewkroh andrewkroh added Integration:m365_defender Microsoft Defender XDR Integration:mattermost Mattermost (Community supported) Integration:modsecurity ModSecurity Audit (Community supported) Integration:mysql_enterprise MySQL Enterprise Integration:netflow NetFlow Records Integration:netskope Netskope Integration:microsoft_defender_cloud Microsoft Defender for Cloud Integration:microsoft_dhcp Microsoft DHCP Integration:microsoft_exchange_online_message_trac Microsoft Exchange Online Message Trace Integration:mimecast Mimecast (Partner supported) Integration:netscout Arbor Peakflow SP Logs (Deprecated) labels Jul 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Integration:m365_defender Microsoft Defender XDR Integration:mattermost Mattermost (Community supported) Integration:microsoft_defender_cloud Microsoft Defender for Cloud Integration:microsoft_dhcp Microsoft DHCP Integration:microsoft_exchange_online_message_trac Microsoft Exchange Online Message Trace Integration:mimecast Mimecast (Partner supported) Integration:modsecurity ModSecurity Audit (Community supported) Integration:mysql_enterprise MySQL Enterprise Integration:netflow NetFlow Records Integration:netscout Arbor Peakflow SP Logs (Deprecated) Integration:netskope Netskope

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants