Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Filebeat] Add ECS TLS fields to existing filesets #15757

Closed
3 tasks done
leehinman opened this issue Jan 22, 2020 · 1 comment · Fixed by #15936
Closed
3 tasks done

[Filebeat] Add ECS TLS fields to existing filesets #15757

leehinman opened this issue Jan 22, 2020 · 1 comment · Fixed by #15936
Assignees
@leehinman
Labels
enhancement Filebeat Filebeat

Comments

@leehinman
Copy link
Contributor

leehinman commented Jan 22, 2020 •
edited
Loading

  • zeek/ssl (maybe other zeek filesets?)
  • aws/elb
  • aws/s3access
@leehinman leehinman self-assigned this Jan 22, 2020
@elasticmachine
Copy link
Collaborator

Pinging @elastic/siem (Team:SIEM)

@andrewkroh andrewkroh mentioned this issue Jan 22, 2020
Closed
51 tasks
@leehinman leehinman mentioned this issue Jan 29, 2020
Merged
leehinman added a commit to leehinman/beats that referenced this issue Jan 29, 2020
@leehinman
Add ECS tls fields to zeek and aws modules
895dc36 
- zeek/smtp
  + tls.established
- zeek/rdp
  + tls.established
- zeek/ssl
  + tls.cipher
  + tls.curve
  + tls.client.issuer
  + tls.established
  + tls.resumed
  + tls.server.issuer
  + tls.version
  + tls.version_protocol
- aws/elb
  + tls.cipher
  + tls.version
  + tls.version_protocol
- aws/s3access
  + tls.cipher
  + tls.version
  + tls.version_protocol

Closes elastic#15757
leehinman added a commit that referenced this issue Feb 3, 2020
@leehinman
[Filebeat] Add ECS tls fields to zeek and aws modules (#15936)
b6baae0 
* Add ECS tls fields to zeek and aws modules

- zeek/smtp
  + tls.established
- zeek/rdp
  + tls.established
- zeek/ssl
  + tls.cipher
  + tls.curve
  + tls.client.issuer
  + tls.established
  + tls.resumed
  + tls.server.issuer
  + tls.version
  + tls.version_protocol
- aws/elb
  + tls.cipher
  + tls.version
  + tls.version_protocol
- aws/s3access
  + tls.cipher
  + tls.version
  + tls.version_protocol

Closes #15757
leehinman added a commit to leehinman/beats that referenced this issue Feb 3, 2020
@leehinman
[Filebeat] Add ECS tls fields to zeek and aws modules (elastic#15936)
e8abb0a 
* Add ECS tls fields to zeek and aws modules

- zeek/smtp
  + tls.established
- zeek/rdp
  + tls.established
- zeek/ssl
  + tls.cipher
  + tls.curve
  + tls.client.issuer
  + tls.established
  + tls.resumed
  + tls.server.issuer
  + tls.version
  + tls.version_protocol
- aws/elb
  + tls.cipher
  + tls.version
  + tls.version_protocol
- aws/s3access
  + tls.cipher
  + tls.version
  + tls.version_protocol

Closes elastic#15757

(cherry picked from commit b6baae0)
@leehinman leehinman mentioned this issue Feb 3, 2020
Merged
5 tasks
leehinman added a commit that referenced this issue Feb 5, 2020
@leehinman
[Filebeat] Add ECS tls fields to zeek and aws modules (#15936) (#16043)
064f4ee 
* Add ECS tls fields to zeek and aws modules

- zeek/smtp
  + tls.established
- zeek/rdp
  + tls.established
- zeek/ssl
  + tls.cipher
  + tls.curve
  + tls.client.issuer
  + tls.established
  + tls.resumed
  + tls.server.issuer
  + tls.version
  + tls.version_protocol
- aws/elb
  + tls.cipher
  + tls.version
  + tls.version_protocol
- aws/s3access
  + tls.cipher
  + tls.version
  + tls.version_protocol

Closes #15757

(cherry picked from commit b6baae0)
@andrewkroh andrewkroh mentioned this issue Mar 12, 2020
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@leehinman leehinman

Labels
enhancement Filebeat Filebeat
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

[Filebeat] Add ECS tls fields to zeek and aws modules leehinman/beats
2 participants
@elasticmachine @leehinman