Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[FileBeat] Sophos xg field has a space in it's name #25154

Closed
mvanderlee opened this issue Apr 19, 2021 · 4 comments · Fixed by #25250
Closed

[FileBeat] Sophos xg field has a space in it's name #25154

mvanderlee opened this issue Apr 19, 2021 · 4 comments · Fixed by #25250
Labels
bug

Comments

@mvanderlee
Copy link

Since at least 7.9.0, Sophos xg has trans_src_ ip instead of trans_src_ip

beats/x-pack/filebeat/module/sophos/xg/_meta/fields.yml

Line 228 in 23e4403

- name: trans_src_ ip

@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Apr 19, 2021
@elasticmachine
Copy link
Collaborator

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

@botelastic botelastic bot removed the needs_team Indicates that the issue/PR needs a Team:* label label Apr 20, 2021
@jamiehynds jamiehynds added bug needs_team Indicates that the issue/PR needs a Team:* label labels Apr 20, 2021
@botelastic botelastic bot removed the needs_team Indicates that the issue/PR needs a Team:* label label Apr 20, 2021
@botelastic
Copy link

botelastic bot commented Apr 20, 2021

This issue doesn't have a Team:<team> label.

@legoguy1000
Copy link
Contributor

legoguy1000 commented Apr 22, 2021 •
edited
Loading

Easy fix but i don't even see that field anywhere in the pipeline. So I think its just been luck that the sample logs didn't have that specific key value pair.

@legoguy1000 legoguy1000 mentioned this issue Apr 22, 2021
Merged
6 tasks
@legoguy1000
Copy link
Contributor

PR opened

legoguy1000 added a commit to legoguy1000/beats that referenced this issue Apr 27, 2021
@legoguy1000
elastic#25154: Remove space from field sophos.xg.trans_src_ ip
153f9ef
P1llus pushed a commit that referenced this issue May 4, 2021
@legoguy1000
#25154: Remove space from field sophos.xg.trans_src_ ip (#25250)
a5079ef
legoguy1000 added a commit to legoguy1000/beats that referenced this issue May 4, 2021
@legoguy1000
elastic#25154: Remove space from field sophos.xg.trans_src_ ip (ela…
9afb013 
…stic#25250)

(cherry picked from commit a5079ef)
This was referenced May 4, 2021
Merged
Merged
legoguy1000 added a commit to legoguy1000/beats that referenced this issue May 4, 2021
@legoguy1000
elastic#25154: Remove space from field sophos.xg.trans_src_ ip (ela…
bfe3e84 
…stic#25250)

(cherry picked from commit a5079ef)
@legoguy1000 legoguy1000 mentioned this issue May 4, 2021
Merged
6 tasks
legoguy1000 added a commit to legoguy1000/beats that referenced this issue May 4, 2021
@legoguy1000
elastic#25154: Remove space from field sophos.xg.trans_src_ ip (ela…
f2547ef 
…stic#25250)

(cherry picked from commit a5079ef)
P1llus added a commit that referenced this issue May 5, 2021
@legoguy1000 @P1llus
Cherry-pick #25250 to 7.12: [Filebeat] Remove space from field `sopho…
09b2a20 
…s.xg.trans_src_ ip` (#25525)

* #25154: Remove space from field `sophos.xg.trans_src_ ip` (#25250)

(cherry picked from commit a5079ef)

* Update CHANGELOG.next.asciidoc

Co-authored-by: Marius Iversen <[email protected]>
P1llus added a commit that referenced this issue May 5, 2021
@legoguy1000 @P1llus
Cherry-pick #25250 to 7.13: [Filebeat] Remove space from field `sopho…
ea88912 
…s.xg.trans_src_ ip` (#25526)

* #25154: Remove space from field `sophos.xg.trans_src_ ip` (#25250)

(cherry picked from commit a5079ef)

* Update CHANGELOG.next.asciidoc

Co-authored-by: Marius Iversen <[email protected]>
P1llus pushed a commit that referenced this issue May 5, 2021
@legoguy1000
#25154: Remove space from field sophos.xg.trans_src_ ip (#25250) (#…
0d08d86 
…25524)

(cherry picked from commit a5079ef)
leweafan pushed a commit to leweafan/beats that referenced this issue Apr 28, 2023
@legoguy1000 @P1llus
Cherry-pick elastic#25250 to 7.12: [Filebeat] Remove space from field…
77c68c5 
… `sophos.xg.trans_src_ ip` (elastic#25525)

* elastic#25154: Remove space from field `sophos.xg.trans_src_ ip` (elastic#25250)

(cherry picked from commit 0d955a0)

* Update CHANGELOG.next.asciidoc

Co-authored-by: Marius Iversen <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

[Filebeat] Remove space from field sophos.xg.trans_src_ ip legoguy1000/beats
4 participants
@mvanderlee @legoguy1000 @elasticmachine @jamiehynds