Skip to content
This repository was archived by the owner on Jan 27, 2023. It is now read-only.
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
130 changes: 130 additions & 0 deletions packages/auditd/3.1.0/changelog.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,130 @@
# newer versions go on top
- version: "3.1.0"
changes:
- description: Change title to Auditd Logs
type: enhancement
link: https://github.com/elastic/integrations/pull/2763
- version: "3.0.0"
changes:
- description: Migrate map visualisation from tile_map to map object
type: enhancement
link: https://github.com/elastic/integrations/pull/3246
- version: "2.2.0"
changes:
- description: Update to ECS 8.2
type: enhancement
link: https://github.com/elastic/integrations/pull/2778
- version: "2.1.2"
changes:
- description: Set event.outcome value according ECS specification
type: bugfix
link: https://github.com/elastic/integrations/pull/3079
- version: "2.1.1"
changes:
- description: Add documentation for multi-fields
type: enhancement
link: https://github.com/elastic/integrations/pull/2916
- version: "2.1.0"
changes:
- description: Store EXECVE arguments in process.args array.
type: enhancement
link: https://github.com/elastic/integrations/pull/2730
- version: "2.0.0"
changes:
- description: Update to ECS 8.0
type: enhancement
link: https://github.com/elastic/integrations/pull/2380
- description: process.ppid is replaced with process.parent.pid (breaking change)
type: enhancement
link: https://github.com/elastic/integrations/pull/2380
- version: "1.3.1"
changes:
- description: Regenerate test files using the new GeoIP database
type: bugfix
link: https://github.com/elastic/integrations/pull/2339
- version: "1.3.0"
changes:
- description: Change test IPs to the supported set for GeoIP
type: enhancement
link: https://github.com/elastic/integrations/pull/2215
- description: Add 8.0.0 version constraint
type: enhancement
link: https://github.com/elastic/integrations/pull/2215
- version: "1.2.4"
changes:
- description: Uniform with guidelines
type: enhancement
link: https://github.com/elastic/integrations/pull/2002
- version: "1.2.3"
changes:
- description: Update Title and Description.
type: enhancement
link: https://github.com/elastic/integrations/pull/1938
- version: "1.2.2"
changes:
- description: Ensure boolean fields are true/false
type: bugfix
link: https://github.com/elastic/integrations/pull/1896
- version: "1.2.1"
changes:
- description: Fix logic that checks for the 'forwarded' tag
type: bugfix
link: https://github.com/elastic/integrations/pull/1796
- version: "1.2.0"
changes:
- description: Update to ECS 1.12.0
type: enhancement
link: https://github.com/elastic/integrations/pull/1637
- version: "1.1.3"
changes:
- description: Convert to generated ECS fields
type: enhancement
link: https://github.com/elastic/integrations/pull/1464
- version: '1.1.2'
changes:
- description: update to ECS 1.11.0
type: enhancement
link: https://github.com/elastic/integrations/pull/1370
- version: "1.1.1"
changes:
- description: Escape special characters in docs
type: enhancement
link: https://github.com/elastic/integrations/pull/1405
- version: "1.1.0"
changes:
- description: Update integration description
type: enhancement
link: https://github.com/elastic/integrations/pull/1364
- version: "1.0.0"
changes:
- description: make GA
type: enhancement
link: https://github.com/elastic/integrations/pull/1215
- description: Set "event.module" and "event.dataset"
type: enhancement
link: https://github.com/elastic/integrations/pull/1215
- version: "0.2.0"
changes:
- description: update to ECS 1.10.0 and apply changes to prepare for package GA
type: enhancement
link: https://github.com/elastic/integrations/pull/1031
- version: "0.1.2"
changes:
- description: set version in the ingest pipeline and make event.original optional
type: enhancement
link: https://github.com/elastic/integrations/pull/989
- version: "0.1.1"
changes:
- description: update to ECS 1.9.0
type: enhancement
link: https://github.com/elastic/integrations/pull/833
- version: "0.1.0"
changes:
- description: Add changes to use ECS 1.8 fields.
type: enhancement # can be one of: enhancement, bugfix, breaking-change
link: https://github.com/elastic/integrations/pull/715
- version: "0.0.1"
changes:
- description: initial release
type: enhancement # can be one of: enhancement, bugfix, breaking-change
link: https://github.com/elastic/integrations/pull/396
19 changes: 19 additions & 0 deletions packages/auditd/3.1.0/data_stream/log/agent/stream/log.yml.hbs
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
paths:
{{#each paths as |path i|}}
- {{path}}
{{/each}}
tags:
{{#if preserve_original_event}}
- preserve_original_event
{{/if}}
{{#each tags as |tag i|}}
- {{tag}}
{{/each}}
{{#contains "forwarded" tags}}
publisher_pipeline.disable_host: true
{{/contains}}
exclude_files: [".gz$"]
{{#if processors}}
processors:
{{processors}}
{{/if}}
Loading