Skip to content

Update Security Service integrations to ECS 8.17.0 (part 1) #14158

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 7 commits into from
Jun 16, 2025
Merged

Update Security Service integrations to ECS 8.17.0 (part 1) #14158

merged 7 commits into from
Jun 16, 2025

Conversation

navnit-elastic
Copy link
Contributor

@navnit-elastic navnit-elastic commented Jun 5, 2025 •
edited
Loading

Proposed commit message

Updates the following integrations to ECS 8.17.0:

  • checkpoint_email
  • claroty_ctd
  • entityanalytics_ad
  • sysdig
  • tychon

Changes are automatically applied using the ecs-update tool.

ecs-update \
  -pr 1 \
  -ecs-git-ref v8.17.0 \
  -ecs-version 8.17.0 \
  -owner elastic/security-service-integrations \
  sysdig tychon checkpoint_email claroty_ctd entityanalytics_ad

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • [ ]

How to test this PR locally

Related issues

Screenshots

@navnit-elastic
[sysdig] - change to ECS version git@v8.17.0
a18475f 
ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. The set
ecs.version processor in pipelines was changed 8.17.0. Previously the pipeline
was setting version 8.11.0. The ecs.version in sample_event.json files was
changed to 8.17.0. Previously sample_event.json files contained 8.0.0, 8.11.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20250415181313-0e28b4ee3655 -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/sysdig
@navnit-elastic
[tychon] - change to ECS version git@v8.17.0
6b9bc5c 
ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. The
ecs.version in sample_event.json files was changed to 8.17.0. Previously
sample_event.json files contained 8.11.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20250415181313-0e28b4ee3655 -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/tychon
@navnit-elastic
[checkpoint_email] - change to ECS version git@v8.17.0
bda46fb 
ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. The set
ecs.version processor in pipelines was changed 8.17.0. Previously the pipeline
was setting version 8.11.0. The ecs.version in sample_event.json files was
changed to 8.17.0. Previously sample_event.json files contained 8.11.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20250415181313-0e28b4ee3655 -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/checkpoint_email
@navnit-elastic
[claroty_ctd] - change to ECS version git@v8.17.0
5cad8b1 
ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. The set
ecs.version processor in pipelines was changed 8.17.0. Previously the pipeline
was setting version 8.11.0. The ecs.version in sample_event.json files was
changed to 8.17.0. Previously sample_event.json files contained 8.11.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20250415181313-0e28b4ee3655 -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/claroty_ctd
@navnit-elastic
[entityanalytics_ad] - change to ECS version git@v8.17.0
21f4c43 
ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. The set
ecs.version processor in pipelines was changed 8.17.0. Previously the pipeline
was setting version 8.11.0. The ecs.version in sample_event.json files was
changed to 8.17.0. Previously sample_event.json files contained 8.11.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20250415181313-0e28b4ee3655 -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/entityanalytics_ad
@navnit-elastic navnit-elastic self-assigned this Jun 5, 2025
@navnit-elastic navnit-elastic added Integration:tychon TYCHON Agentless (Partner supported) Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Integration:entityanalytics_ad Active Directory Entity Analytics Integration:claroty_ctd Claroty CTD Integration:sysdig Sysdig Integration:checkpoint_email Check Point Harmony Email & Collaboration Team:Sit-Crest Crest developers on the Security Integrations team [elastic/sit-crest-contractors] enhancement New feature or request labels Jun 5, 2025
@navnit-elastic navnit-elastic marked this pull request as ready for review June 5, 2025 12:49
@navnit-elastic navnit-elastic requested a review from a team as a code owner June 5, 2025 12:49
@elasticmachine
Copy link

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@elastic-vault-github-plugin-prod
Copy link

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@navnit-elastic navnit-elastic mentioned this pull request Jun 16, 2025
Open
@navnit-elastic
Merge branch 'main' into ssi/ecs-8.17-part1
3410eab 
Conflicts:
	packages/checkpoint_email/_dev/build/build.yml
	packages/checkpoint_email/changelog.yml
	packages/checkpoint_email/manifest.yml
	packages/entityanalytics_ad/changelog.yml
	packages/entityanalytics_ad/manifest.yml
chrisberkhout
chrisberkhout approved these changes Jun 16, 2025
View reviewed changes
Copy link
Contributor

@chrisberkhout chrisberkhout left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good.

The checkpoint_email changes look like formatting-only.

@navnit-elastic
Copy link
Contributor Author

Thanks @chrisberkhout! Yes, the checkpoint_email was upgraded in #14141 which was merged after this PR opened, hence only formatting changes are visible.

@elastic-sonarqube Elastic SonarQube
Copy link

Quality Gate passed Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
92.1% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

@elasticmachine
Copy link

💚 Build Succeeded

History

cc @navnit-elastic

@chrisberkhout chrisberkhout merged commit 19a4c38 into elastic:main Jun 16, 2025
7 checks passed
@navnit-elastic navnit-elastic mentioned this pull request Jun 16, 2025
Open
@elastic-vault-github-plugin-prod
Copy link

Package claroty_ctd - 0.7.0 containing this change is available at https://epr.elastic.co/package/claroty_ctd/0.7.0/

@elastic-vault-github-plugin-prod
Copy link

Package entityanalytics_ad - 0.15.0 containing this change is available at https://epr.elastic.co/package/entityanalytics_ad/0.15.0/

@elastic-vault-github-plugin-prod
Copy link

Package sysdig - 0.5.0 containing this change is available at https://epr.elastic.co/package/sysdig/0.5.0/

@elastic-vault-github-plugin-prod
Copy link

Package tychon - 0.4.0 containing this change is available at https://epr.elastic.co/package/tychon/0.4.0/

@andrewkroh andrewkroh added the documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. label Jul 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@chrisberkhout chrisberkhout chrisberkhout approved these changes

Assignees

@navnit-elastic navnit-elastic

Labels
documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. enhancement New feature or request Integration:checkpoint_email Check Point Harmony Email & Collaboration Integration:claroty_ctd Claroty CTD Integration:entityanalytics_ad Active Directory Entity Analytics Integration:sysdig Sysdig Integration:tychon TYCHON Agentless (Partner supported) Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Team:Sit-Crest Crest developers on the Security Integrations team [elastic/sit-crest-contractors]
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@navnit-elastic @elasticmachine @chrisberkhout @andrewkroh