Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cherry-pick #19494 to 7.7: Fix tls mapping in suricata module #19607

Merged
merged 1 commit into from
Jul 6, 2020

Commits on Jul 6, 2020

  1. [Filebeat] Fix tls mapping in suricata module (elastic#19494)

    * Fix tls mapping in suricata module
    
    - add suricata.eve.tls.ja3s.string field
    - add suricata.eve.tls.ja3s.hash field
    - add suricata.eve.tls.ja3.string field
    - add suricata.eve.tls.ja3.hash field
    - set default_field to false for ja3 & ja3s fields
    - map suricata.eve.tls.ja3.hash to tls.client.ja3
    - map suricata.eve.tls.ja3s.hash to tls.server.ja3s
    - perform suricata.eve.tls.* -> tls.* mappings for all event types
    
    Closes elastic#19492
    
    (cherry picked from commit afffe2b)
    leehinman committed Jul 6, 2020
    Configuration menu
    Copy the full SHA
    bfa2bb3 View commit details
    Browse the repository at this point in the history