Cherry-pick #23465 to 7.x: Update Beats to ECS 1.8.0 #24072
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
botelastic
bot
added
the
needs_team
|
Pinging @elastic/security-external-integrations (Team:Security-External Integrations) |
botelastic
bot
removed
the
needs_team
💚 Build Succeeded
Expand to view the summary
Build stats
Test stats 🧪
Trends 🧪💚 Flaky test reportTests succeeded. Expand to view the summary
Test stats 🧪
|
Incorporates ECS 1.8 changes from the following PRs: Support host.type field in add_host_metadata processor and Auditbeat's system/host elastic#23513 Winlogbeat elastic#23563 Auditbeat auditd elastic#23594 Journalbeat elastic#23737 Packetbeat elastic#23783 Filebeat: auditd elastic#23723 cisco elastic#23819 cef elastic#23832 crowdstrike falcon elastic#23875 fortinet firewall elastic#23902 microsoft elastic#23897 elasticsearch/audit elastic#24000 Gsuite/Workspace elastic#23709 o365 elastic#23896 zoom elastic#23904 okta elastic#23929 aws/cloudtrail elastic#23911 aws/s3access elastic#23920 azure elastic#23927 juniper/srx elastic#23936 panw elastic#23931 sophos/xg elastic#23967 system/auth elastic#23961 mysqlenterprise elastic#23978 zeek elastic#23847 Make all Beats and modules report ECS 1.8.0 elastic#23992 Closes elastic#23118 Co-authored-by: Marc Guasch <marc-gr@users.noreply.github.com> (cherry picked from commit 048c3cc)
adriansr
force-pushed
the
backport_23465_7.x
branch
from
2238bc7
to
6d0b24a
Compare
P1llus
approved these changes
Feb 17, 2021
There was a problem hiding this comment.
LGTM from my side, don't know if we want multiple reviews due to the size. Since the original PR was already approved I only looked at parts like the Changelog, the general format of the files, and picked a few golden files to look at from each affected module.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Cherry-pick of PR #23465 to 7.x branch. Original message:
What does this PR do?
Incorporates ECS 1.8 changes from the following PRs:
Update with final 1.8.0 ECS release (code & fields) (pending)
Support
host.typefield inadd_host_metadataprocessor and Auditbeat'ssystem/hostAdd os.type field from ECS 1.8 #23513Winlogbeat [ECS] Winlogbeat ecs 1.8 changes #23563
Auditbeat auditd Update Auditbeat auditd module to ECS 1.8 #23594
Journalbeat [Journalbeat][ecs] Journalbeat ecs 1.8 #23737
Packetbeat [ECS] Packetbeat ecs 1.8 #23783
Filebeat:
Make all Beats and modules report ECS 1.8.0 Update all Beats to report ECS version 1.8.0 #23992
Closes [ECS] Upgrade modules to 1.8 #23118