Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding support for first_event and first_response cursors in httpjson v2 #23358

Closed
P1llus opened this issue Jan 5, 2021 · 1 comment · Fixed by #23437
Closed

Adding support for first_event and first_response cursors in httpjson v2 #23358

P1llus opened this issue Jan 5, 2021 · 1 comment · Fixed by #23437

Comments

@P1llus
Copy link
Member

P1llus commented Jan 5, 2021

In the rewritten version of httpjson (v2), there is now cursor support, that is able to access last_event and last_response, so that it can use a chosen field as a cursor for the next requests (for example tracking the timestamp of the last event to filter on for the next interval).

However not all API's returns the newest event last, so we would need to accommodate for the API's that returns the newest event first.

2 Modules are currently blocked by this, Nessus and Cisco AMP.

@elasticmachine
Copy link
Collaborator

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants