Skip to content

Cherry-pick #16500 to 7.x: [Filebeat] Improve ECS categorization field mappings in googlecloud module#16528

Merged
leehinman merged 1 commit intoelastic:7.xfrom
leehinman:backport_16500_7.x
Feb 25, 2020
Merged

Cherry-pick #16500 to 7.x: [Filebeat] Improve ECS categorization field mappings in googlecloud module#16528
leehinman merged 1 commit intoelastic:7.xfrom
leehinman:backport_16500_7.x

Conversation

@leehinman
Copy link
Copy Markdown
Contributor

Cherry-pick of PR #16500 to 7.x branch. Original message:

  • audit

    • event.id
    • event.action
    • event.kind
  • firewall

    • event.kind
    • event.category
    • event.type
    • event.action
    • event.id
    • rule.name
  • vpcflow

    • event.kind
    • event.category
    • event.type
    • event.id

Closes #16030

…odule (elastic#16500)

+ audit
  - event.id
  - event.action
  - event.kind

+ firewall
  - event.kind
  - event.category
  - event.type
  - event.action
  - event.id
  - rule.name

+ vpcflow
  - event.kind
  - event.category
  - event.type
  - event.id

Closes elastic#16030
Closes elastic#15651

(cherry picked from commit e1fa198)
@elasticmachine
Copy link
Copy Markdown
Contributor

Pinging @elastic/siem (Team:SIEM)

@leehinman leehinman merged commit 29f87aa into elastic:7.x Feb 25, 2020
@leehinman leehinman deleted the backport_16500_7.x branch February 25, 2020 14:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants