Skip to content

update Sophos readme #3160

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ellis-elastic merged 10 commits into from
Jun 16, 2022
Merged

update Sophos readme #3160

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
a3472b2
update Sophos readme
ellis-elastic Apr 21, 2022
845ab55
update changelog and ran build
ellis-elastic Apr 21, 2022
a7dbba2
Update changelog number and ran build
ellis-elastic Apr 22, 2022
12ada51
Merge branch 'main' into sophos-docs
ellis-elastic Apr 22, 2022
d7b9ba1
Merge branch 'main' into sophos-docs
bmorelli25 Apr 27, 2022
9ad96ae
Update packages/sophos/_dev/build/docs/README.md
ellis-elastic Jun 9, 2022
4d20446
Merge branch 'main' into sophos-docs
ellis-elastic Jun 9, 2022
e3ac4ef
Update
adriansr Jun 13, 2022
8c65971
Update readme
ellis-elastic Jun 15, 2022
f00c245
Update Readme
ellis-elastic Jun 15, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions packages/sophos/_dev/build/docs/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,8 @@ The Sophos integration collects and parses logs from Sophos Products.

Currently it accepts logs in syslog format or from a file for the following devices:

- `utm` dataset: supports Astaro Security Gateway logs.
- `xg` dataset: supports Sophos XG SFOS logs.
- `utm` dataset: supports [Unified Threat Management](https://www.sophos.com/en-us/support/documentation/sophos-utm) (formerly known as Astaro Security Gateway) logs.
- `xg` dataset: supports [Sophos XG SFOS logs](https://docs.sophos.com/nsg/sophos-firewall/17.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts/Logs.html).

To configure a remote syslog destination, please reference the [SophosXG/SFOS Documentation](https://community.sophos.com/kb/en-us/123184).

Expand All @@ -20,7 +20,7 @@ Versions above this are expected to work but have not been tested.

### Utm log

The `utm` dataset collects Astaro Security Gateway logs.
The `utm` dataset collects Unified Threat Management logs.

{{fields "utm"}}

Expand Down
5 changes: 5 additions & 0 deletions packages/sophos/changelog.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: "2.2.2"
changes:
- description: Update Readme to include links to Sophos's documentation. Also used the latest product name for Astaro
type: enhancement
link: https://github.com/elastic/integrations/pull/3160
- version: "2.2.1"
changes:
- description: Format source.mac and destination.mac as per ECS for the UTM data stream.
Expand Down
6 changes: 3 additions & 3 deletions packages/sophos/docs/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,8 @@ The Sophos integration collects and parses logs from Sophos Products.

Currently it accepts logs in syslog format or from a file for the following devices:

- `utm` dataset: supports Astaro Security Gateway logs.
- `xg` dataset: supports Sophos XG SFOS logs.
- `utm` dataset: supports [Unified Threat Management](https://www.sophos.com/en-us/support/documentation/sophos-utm) (formerly known as Astaro Security Gateway) logs.
- `xg` dataset: supports [Sophos XG SFOS logs](https://docs.sophos.com/nsg/sophos-firewall/17.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts/Logs.html).

To configure a remote syslog destination, please reference the [SophosXG/SFOS Documentation](https://community.sophos.com/kb/en-us/123184).

Expand All @@ -20,7 +20,7 @@ Versions above this are expected to work but have not been tested.

### Utm log

The `utm` dataset collects Astaro Security Gateway logs.
The `utm` dataset collects Unified Threat Management logs.

**Exported fields**

Expand Down
2 changes: 1 addition & 1 deletion packages/sophos/manifest.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
format_version: 1.0.0
name: sophos
title: Sophos Logs
version: "2.2.1"
version: 2.2.2
description: Collect and parse logs from Sophos Products with Elastic Agent.
categories: ["security"]
release: ga
Expand Down