Skip to content

[zscaler_zpa] Add ZScaler ZPA package.#2458

Merged
andrewkroh merged 6 commits intoelastic:mainfrom
vinit-chauhan:package_zscaler_zpa
Feb 14, 2022
Merged

[zscaler_zpa] Add ZScaler ZPA package.#2458
andrewkroh merged 6 commits intoelastic:mainfrom
vinit-chauhan:package_zscaler_zpa

Conversation

@vinit-chauhan
Copy link
Contributor

What does this PR do?

  • Generated the skeleton of the ZScaler ZPA integration package.
  • Added 5 data streams (App connector status, Audit, Browser access, User activity. and User status).
  • Added data collection logic for all 5 data streams.
  • Added the ingest pipeline for all the data streams.
  • Mapped fields according to the ECS schema and added Fields metadata in the appropriate yml files
  • Added dashboards and visualizations.
  • Added test for pipeline for all the data streams.
  • Added system test cases for all the data streams.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • If I'm introducing a new feature, I have modified the Kibana version constraint in my package's manifest.yml file to point to the latest Elastic stack release (e.g. ^7.16.2).

How to test this PR locally

  • Clone integrations repo.
  • Install elastic-package locally.
  • Start elastic stack using elastic-package.
  • Move to integrations/packages/zscaler_zpa directory.
  • Run the following command to run tests.

elastic-package test

Screenshots

image
image
image
image

@elasticmachine
Copy link

elasticmachine commented Jan 3, 2022

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS
Pipeline View Test View Changes Artifacts preview preview

Expand to view the summary

Build stats

  • Start Time: 2022-02-14T12:32:12.269+0000

  • Duration: 22 min 11 sec

Test stats 🧪

Test Results
Failed 0
Passed 59
Skipped 0
Total 59

🤖 GitHub comments

To re-run your PR in the CI, just comment with:

  • /test : Re-trigger the build.

@vinit-chauhan vinit-chauhan marked this pull request as ready for review January 6, 2022 13:58
@elasticmachine
Copy link

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

@efd6
Copy link
Contributor

efd6 commented Jan 9, 2022

/test

@jamiehynds jamiehynds linked an issue Jan 12, 2022 that may be closed by this pull request
15 tasks
@marc-gr
Copy link
Contributor

marc-gr commented Jan 25, 2022

/test

Copy link
Member

@andrewkroh andrewkroh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks very good. Just a few minor suggestions.

- Removed dynamic_fields section from pipeline tests
- Removed level parameter from ecs.yml
- Changed the type of IP fields from keyword to ip.
- Changed the type of date fields from keyword to date.
- Added new line for log files.
- Re-generated pipeline test expacted files.
- Updated ecs version to 8.0.0
@andrewkroh
Copy link
Member

/test

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Integration:zscaler_zpa Zscaler Private Access New Integration Issue or pull request for creating a new integration package.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Zscaler Private Access

5 participants