Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Osquerybeat: Upgrade to osquery 5.12.1 #40368

Merged
merged 2 commits into from
Jul 30, 2024

Conversation

aleksmaus
Copy link
Member

What does this PR do?

Upgrade to osquery 5.12.1.

Why is it important?

Picking up the latest osquery release.

Checklist

  • My code follows the style guidelines of this project
  • I have commented my code, particularly in hard-to-understand areas

Screenshots

Screenshot 2024-07-26 at 3 45 21 PM

@aleksmaus aleksmaus requested a review from a team as a code owner July 26, 2024 19:48
@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Jul 26, 2024
Copy link
Contributor

mergify bot commented Jul 26, 2024

This pull request does not have a backport label.
If this is a bug or security fix, could you label this PR @aleksmaus? 🙏.
For such, you'll need to label your PR with:

  • The upcoming major version of the Elastic Stack
  • The upcoming minor version of the Elastic Stack (if you're not pushing a breaking change)

To fixup this pull request, you need to add the backport labels for the needed
branches, such as:

  • backport-v8./d.0 is the label to automatically backport to the 8./d branch. /d is the digit

@aleksmaus aleksmaus added the Team:Security-Deployment and Devices Deployment and Devices Team in Security Solution label Jul 26, 2024
@elasticmachine
Copy link
Collaborator

Pinging @elastic/sec-deployment-and-devices (Team:Security-Deployment and Devices)

@botelastic botelastic bot removed the needs_team Indicates that the issue/PR needs a Team:* label label Jul 26, 2024
Copy link
Contributor

@pkoutsovasilis pkoutsovasilis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: add a changelog entry to mark when this happened but LGTM

@aleksmaus
Copy link
Member Author

aleksmaus commented Jul 26, 2024

nit: add a changelog entry to mark when this happened but LGTM

yeah, not exactly sure what's up with the current changelog, it was not rotated it seems
still has changes for 8.15
https://github.com/elastic/beats/blob/main/CHANGELOG.next.asciidoc?plain=1#L68

@aleksmaus
Copy link
Member Author

nit: add a changelog entry to mark when this happened but LGTM

yeah, not exactly sure what's up with the current changelog, it was not rotated it seems still has changes for 8.15 https://github.com/elastic/beats/blob/main/CHANGELOG.next.asciidoc?plain=1#L68

Followed up on this, waiting for response.

@aleksmaus aleksmaus added the backport-skip Skip notification from the automated backport with mergify label Jul 26, 2024
@aleksmaus
Copy link
Member Author

Another hiccup, osquery schema generation seems to be broken on 5.12.1 branch. I fixed it up, but there is still some data is missing. Will look further today. We use their schema to generate mappings for integration package and readme fields.

@aleksmaus aleksmaus merged commit 49f3efe into elastic:main Jul 30, 2024
17 checks passed
aleksmaus added a commit to elastic/kibana that referenced this pull request Jul 30, 2024
## Summary

Update exported fields reference for osquery 5.12.1.

## Related PR

- Requires elastic/beats#40368
- Requires elastic/integrations#10641
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport-skip Skip notification from the automated backport with mergify Team:Security-Deployment and Devices Deployment and Devices Team in Security Solution
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants