-
Notifications
You must be signed in to change notification settings - Fork 8.5k
Closed
Labels
Team:Defend Workflows“EDR Workflows” sub-team of Security Solution“EDR Workflows” sub-team of Security SolutionTeam:FleetTeam label for Observability Data Collection Fleet teamTeam label for Observability Data Collection Fleet team
Description
In support of Endpoint Security, add the following additional attributes to datasources:
updated_on: Date (ISO). Should be set every time the SO is updatedupdated_by: User. Should be set every time the SO is updatedcreated_on: Date (ISO). Should be set once only during createcreated_by: User. Should be set once only during create
REST Impact
- New attributes should be returned with every response that includes the Datasource
- None of these new attributes should be accepted via the REST API (
POST,PUT, etc.) - ❓ These should NOT be included in the JSON/YAML that is sent to the Agent (cc/ @nchaulet)
UI Impact
- ❓ Should these be shown in the UI? (either on the Agent Config > Datasources list/table? or the Edit Datasource View?) (/cc @hbharding)
ph
Metadata
Metadata
Assignees
Labels
Team:Defend Workflows“EDR Workflows” sub-team of Security Solution“EDR Workflows” sub-team of Security SolutionTeam:FleetTeam label for Observability Data Collection Fleet teamTeam label for Observability Data Collection Fleet team