[Filebeat] Upgrade iptables module to ECS 1.4 #16166
Labels
Comments
|
Pinging @elastic/siem (Team:SIEM) |
leehinman
added a commit
to leehinman/beats
that referenced
this issue
Mar 14, 2020
- event.category - event.kind - event.type - related.ip - convert pipeline to yaml Closes elastic#16166
leehinman
added a commit
that referenced
this issue
Mar 17, 2020
* Improve ECS categorization in iptables module - event.action, map to accept/drop like gui - event.category - event.kind - event.type - observer.egress.zone - observer.ingress.zone - related.ip - rule.id - rule.name - convert pipeline to yaml - fix tcp_flags grok to get all entries - make iptables.tcp.flags an array - make iptables.fragment_flags an array Closes #16166
leehinman
added a commit
to leehinman/beats
that referenced
this issue
Mar 17, 2020
* Improve ECS categorization in iptables module - event.action, map to accept/drop like gui - event.category - event.kind - event.type - observer.egress.zone - observer.ingress.zone - related.ip - rule.id - rule.name - convert pipeline to yaml - fix tcp_flags grok to get all entries - make iptables.tcp.flags an array - make iptables.fragment_flags an array Closes elastic#16166 (cherry picked from commit d9c83df)
leehinman
added a commit
that referenced
this issue
Mar 19, 2020
…7064) * Improve ECS categorization in iptables module - event.action, map to accept/drop like gui - event.category - event.kind - event.type - observer.egress.zone - observer.ingress.zone - related.ip - rule.id - rule.name - convert pipeline to yaml - fix tcp_flags grok to get all entries - make iptables.tcp.flags an array - make iptables.fragment_flags an array Closes #16166 (cherry picked from commit d9c83df)
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Filesets
The text was updated successfully, but these errors were encountered: