Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Filebeat] Update crowdstrike module #20138

Merged
merged 18 commits into from
Jul 23, 2020
Merged

[Filebeat] Update crowdstrike module #20138

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
18 commits
Select commit Hold shift + click to select a range
4c341fd
Update crowdstrike module
Jul 22, 2020
665a80b
Add in blank UserIP test
Jul 22, 2020
a6d288c
Fix up conversion error with proper fail_on_error usage
Jul 22, 2020
30cf26d
Add timestamp processing for all timestamps
Jul 22, 2020
2151eea
Add event ingested timestamp
Jul 22, 2020
8b4b57a
Add Changelog entry
Jul 22, 2020
e361568
Merge branch 'master' into crowdstrike-fixes
Jul 22, 2020
cc8f478
Revert accidentally touching suricata pipeline
Jul 22, 2020
0c625ee
Fix up integration tests
Jul 22, 2020
1838a90
Merge branch 'master' of github.com:elastic/beats into crowdstrike-fixes
Jul 22, 2020
13c46c0
Update with new crowdstrike samples
Jul 22, 2020
7dfae0a
Only normalize process when we have info
Jul 22, 2020
ed257ee
Remove empty arguments from string split
Jul 22, 2020
ad59746
update changelog entry
Jul 22, 2020
4d8c1cf
Refactor to use built-in processors
Jul 22, 2020
0606fc4
clean up pipeline code
Jul 22, 2020
1589719
Fix linter errors and add related fields
Jul 23, 2020
3ca4e46
Run mage update in OSS folder to pick up updated fields docs
Jul 23, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions CHANGELOG.next.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -221,6 +221,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
- Ignore missing in Zeek module when dropping unecessary fields. {pull}19984[19984]
- Fix Filebeat OOMs on very long lines {issue}19500[19500], {pull}19552[19552]
- Fix s3 input parsing json file without expand_event_list_from_field. {issue}19902[19902] {pull}19962[19962]
- Fix millisecond timestamp normalization issues in CrowdStrike module {issue}20035[20035], {pull}20138[20138]

*Heartbeat*

Expand Down Expand Up @@ -487,6 +488,8 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
- Add experimental dataset squid/log for Squid Proxy Server logs {pull}19713[19713]
- Add experimental dataset zscaler/zia for Zscaler Internet Access logs {pull}19713[19713]
- Add initial support for configurable file identity tracking. {pull}18748[18748]
- Add event.ingested for CrowdStrike module {pull}20138[20138]
- Add support for additional fields and FirewallMatchEvent type events in CrowdStrike module {pull}20138[20138]

*Heartbeat*

Expand Down
Loading