Cherry-pick #21160 to 7.x: [ECS] Adds related.hosts to capture all hostnames and host identifiers on an event.#21257
Conversation
|
Pinging @elastic/siem (Team:SIEM) |
b47e02c to
f1817aa
Compare
💔 Tests FailedExpand to view the summary
Build stats
Test stats 🧪
Test errorsExpand to view the tests failures
Steps errorsExpand to view the steps failures
Log outputExpand to view the last 100 lines of log output
|
52f39bb to
961956a
Compare
…rs on an event. (elastic#21160) * Add related.hosts to panos * Add related.hosts to osquery * Add related.hosts to system * Add related.hosts to defender atp * Add related.hosts to cisco * Add related.hosts to suricata * Use allow_duplicates: false to remove duplicate hosts * Add related.hosts to rsa2elk modules * Add changelog entry * Add checks to avoid empty strings (cherry picked from commit 3fb01e3)
961956a to
f89371b
Compare
Cherry-pick of PR #21160 to 7.x branch. Original message:
What does this PR do?
Added related.hosts to capture all hostnames and host identifiers on an event.
Why is it important?
To keep the modules up to date with ecs 1.6
Checklist
- [ ] My code follows the style guidelines of this project- [ ] I have commented my code, particularly in hard-to-understand areas- [ ] I have made corresponding changes to the documentationCHANGELOG.next.asciidocorCHANGELOG-developer.next.asciidoc.Author's Checklist
Related issues