Skip to content

[ECS] Update SEI packages to ECS 8.10 (Part 3) #7919

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 34 commits into from
Sep 22, 2023
Merged

[ECS] Update SEI packages to ECS 8.10 (Part 3) #7919

merged 34 commits into from
Sep 22, 2023

Conversation

kgeller
Copy link
Contributor

@kgeller kgeller commented Sep 21, 2023 •
edited
Loading

What does this PR do?

Updates the following SEI packages to ECS version 8.10:

  • m365_defender
  • mattermost
  • microsoft_defender_cloud
  • microsoft_dhcp
  • microsoft_exchange_online_message_trace
  • mimecast
  • modsecurity
  • mysql_enterprise
  • netflow
  • netscout
  • netskope
  • network_traffic
  • o365
  • osquery
  • panw
  • panw_cortex_xdr
  • pulse_connect_secure
  • qnap_nas
  • radware
  • rapid7_insightvm
  • santa
  • sentinel_one
  • sentinel_one_cloud_funnel
  • snort
  • snyk
  • sonicwall_firewall
  • sophos
  • sophos_central
  • squid
  • suricata
  • symantec_endpoint
  • sysmon_linux
  • system_audit

Changes generated by:

go install github.com/andrewkroh/go-examples/elastic-package-changelog@main
go run github.com/andrewkroh/go-examples/ecs-update@main -owner elastic/security-external-integrations -ecs-version=8.10.0 -ecs-git-ref=v8.10.0 -pr 7919 packages/<PACKAGE>

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.

Related issues

@kgeller
[m365_defender] - change to ECS version git@v8.10.0
404a082 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/m365_defender
@kgeller kgeller self-assigned this Sep 21, 2023
@kgeller
[mattermost] - change to ECS version git@v8.10.0
9771f2b 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/mattermost
@kgeller
[microsoft_defender_cloud] - change to ECS version git@v8.10.0
f91cb9b 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/microsoft_defender_cloud
@kgeller
[microsoft_dhcp] - change to ECS version git@v8.10.0
788fd82 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/microsoft_dhcp
@kgeller
[microsoft_exchange_online_message_trace] - change to ECS version git…
bf0cd8a 
…@v8.10.0

ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/microsoft_exchange_online_message_trace
@kgeller
[mimecast] - change to ECS version git@v8.10.0
2334932 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/mimecast
@kgeller
[modsecurity] - change to ECS version git@v8.10.0
607e43c 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/modsecurity
@kgeller
[mysql_enterprise] - change to ECS version git@v8.10.0
93d1f40 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/mysql_enterprise
@kgeller
[netflow] - change to ECS version git@v8.10.0
d2a945e 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/netflow
@kgeller
[netscout] - change to ECS version git@v8.10.0
f669229 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/netscout
@kgeller
[netskope] - change to ECS version git@v8.10.0
41e00aa 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/netskope
@kgeller
[network_traffic] - change to ECS version git@v8.10.0
ada869d 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/network_traffic
@kgeller
[o365] - change to ECS version git@v8.10.0
44aead5 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/o365
@kgeller
[osquery] - change to ECS version git@v8.10.0
e762743 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/osquery
@kgeller
[panw] - change to ECS version git@v8.10.0
06bf7c4 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/panw
@kgeller
[panw_cortex_xdr] - change to ECS version git@v8.10.0
ba0267d 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/panw_cortex_xdr
@kgeller
[pulse_connect_secure] - change to ECS version git@v8.10.0
75e2d82 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/pulse_connect_secure
@kgeller
[qnap_nas] - change to ECS version git@v8.10.0
48573c3 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/qnap_nas
@kgeller
[radware] - change to ECS version git@v8.10.0
f9af71d 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/radware
@kgeller
[rapid7_insightvm] - change to ECS version git@v8.10.0
e104dbf 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/rapid7_insightvm
@kgeller
[santa] - change to ECS version git@v8.10.0
6eb3e07 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/santa
@kgeller
[sentinel_one] - change to ECS version git@v8.10.0
45ced49 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/sentinel_one
@kgeller
[sentinel_one_cloud_funnel] - change to ECS version git@v8.10.0
caaff9a 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/sentinel_one_cloud_funnel
@kgeller
[snort] - change to ECS version git@v8.10.0
7d25932 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/snort
@kgeller
[snyk] - change to ECS version git@v8.10.0
40ebf36 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/snyk
@kgeller
[sonicwall_firewall] - change to ECS version git@v8.10.0
354ae68 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/sonicwall_firewall
@kgeller
[sophos] - change to ECS version git@v8.10.0
7c7f4b4 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/sophos
@kgeller
[sophos_central] - change to ECS version git@v8.10.0
8d29f2c 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/sophos_central
@kgeller
[squid] - change to ECS version git@v8.10.0
73ab2a0 
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/squid
@elasticmachine
Copy link

Package panw - 3.17.0 containing this change is available at https://epr.elastic.co/search?package=panw

@elasticmachine
Copy link

Package panw_cortex_xdr - 1.21.0 containing this change is available at https://epr.elastic.co/search?package=panw_cortex_xdr

@elasticmachine
Copy link

Package pulse_connect_secure - 1.15.0 containing this change is available at https://epr.elastic.co/search?package=pulse_connect_secure

@elasticmachine
Copy link

Package qnap_nas - 1.16.0 containing this change is available at https://epr.elastic.co/search?package=qnap_nas

@elasticmachine
Copy link

Package radware - 0.17.0 containing this change is available at https://epr.elastic.co/search?package=radware

@elasticmachine
Copy link

Package rapid7_insightvm - 1.5.0 containing this change is available at https://epr.elastic.co/search?package=rapid7_insightvm

@elasticmachine
Copy link

Package santa - 3.14.0 containing this change is available at https://epr.elastic.co/search?package=santa

@elasticmachine
Copy link

Package sentinel_one - 1.14.0 containing this change is available at https://epr.elastic.co/search?package=sentinel_one

@elasticmachine
Copy link

Package sentinel_one_cloud_funnel - 0.6.0 containing this change is available at https://epr.elastic.co/search?package=sentinel_one_cloud_funnel

@elasticmachine
Copy link

Package snort - 1.12.0 containing this change is available at https://epr.elastic.co/search?package=snort

@elasticmachine
Copy link

Package snyk - 1.16.0 containing this change is available at https://epr.elastic.co/search?package=snyk

@elasticmachine
Copy link

Package sonicwall_firewall - 1.11.0 containing this change is available at https://epr.elastic.co/search?package=sonicwall_firewall

@elasticmachine
Copy link

Package sophos - 3.4.0 containing this change is available at https://epr.elastic.co/search?package=sophos

@elasticmachine
Copy link

Package sophos_central - 1.10.0 containing this change is available at https://epr.elastic.co/search?package=sophos_central

@elasticmachine
Copy link

Package squid - 0.18.0 containing this change is available at https://epr.elastic.co/search?package=squid

@elasticmachine
Copy link

Package suricata - 2.17.0 containing this change is available at https://epr.elastic.co/search?package=suricata

@elasticmachine
Copy link

Package symantec_endpoint - 2.13.0 containing this change is available at https://epr.elastic.co/search?package=symantec_endpoint

@elasticmachine
Copy link

Package sysmon_linux - 1.4.0 containing this change is available at https://epr.elastic.co/search?package=sysmon_linux

@elasticmachine
Copy link

Package system_audit - 1.9.0 containing this change is available at https://epr.elastic.co/search?package=system_audit

@andrewkroh andrewkroh added Integration:m365_defender Microsoft Defender XDR Integration:mattermost Mattermost (Community supported) Integration:modsecurity ModSecurity Audit (Community supported) Integration:mysql_enterprise MySQL Enterprise Integration:netflow NetFlow Records Integration:netskope Netskope Integration:microsoft_defender_cloud Microsoft Defender for Cloud Integration:microsoft_dhcp Microsoft DHCP Integration:microsoft_exchange_online_message_trac Microsoft Exchange Online Message Trace Integration:mimecast Mimecast (Partner supported) Integration:netscout Arbor Peakflow SP Logs (Deprecated) labels Jul 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@taylor-swanson taylor-swanson taylor-swanson approved these changes

Assignees

@kgeller kgeller

Labels
Integration:m365_defender Microsoft Defender XDR Integration:mattermost Mattermost (Community supported) Integration:microsoft_defender_cloud Microsoft Defender for Cloud Integration:microsoft_dhcp Microsoft DHCP Integration:microsoft_exchange_online_message_trac Microsoft Exchange Online Message Trace Integration:mimecast Mimecast (Partner supported) Integration:modsecurity ModSecurity Audit (Community supported) Integration:mysql_enterprise MySQL Enterprise Integration:netflow NetFlow Records Integration:netscout Arbor Peakflow SP Logs (Deprecated) Integration:netskope Netskope
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@kgeller @elasticmachine @taylor-swanson @andrewkroh