Pinging @elastic/siem (Team:SIEM)

💚 Build Succeeded

run tests

This is failing because elastic/elasticsearch#63257 is not merged yet.

run tests

run tests

Thank you for fixing this!

The build is failing with errors like

2020-10-07T10:48:29.658-0200 ERROR [publisher_pipeline_output] pipeline/output.go:154 Failed to connect to backoff(elasticsearch(http://elasticsearch:9200)): Connection marked as failed because the onConnect callback failed: 1 error: Error loading pipeline for fileset cyberark/corepas: couldn't load pipeline: couldn't load json. Error: 400 Bad Request: {"error":{"root_cause":[{"type":"script_exception","reason":"compile error","processor_type":"append","script_stack":["... ains(ctx?.host?.hostname server?.domain)) || ctx?. ..."," ^---- HERE"],"script":"ctx?.host?.hostname != null && ctx.host?.hostname != '' && ((ctx?.related?.hosts instanceof List && !ctx?.related?.hosts.contains(ctx?.host?.hostname server?.domain)) || ctx?.related?.hosts != ctx?.host?.hostname server?.domain)","lang":"painless","position":{"offset":150,"start":125,"end":175}}],"type":"script_exception","reason":"compile error","processor_type":"append","script_stack":["... ains(ctx?.host?.hostname server?.domain)) || ctx?. ..."," ^---- HERE"],"script":"ctx?.host?.hostname != null && ctx.host?.hostname != '' && ((ctx?.related?.hosts instanceof List && !ctx?.related?.hosts.contains(ctx?.host?.hostname server?.domain)) || ctx?.related?.hosts != ctx?.host?.hostname server?.domain)","lang":"painless","position":{"offset":150,"start":125,"end":175},"caused_by":{"type":"illegal_argument_exception","reason":"invalid sequence of tokens near ['server'].","caused_by":{"type":"no_viable_alt_exception","reason":null}}},"status":400}. Response body: {"error":{"root_cause":[{"type":"script_exception","reason":"compile error","processor_type":"append","script_stack":["... ains(ctx?.host?.hostname server?.domain)) || ctx?. ..."," ^---- HERE"],"script":"ctx?.host?.hostname != null && ctx.host?.hostname != '' && ((ctx?.related?.hosts instanceof List && !ctx?.related?.hosts.contains(ctx?.host?.hostname server?.domain)) || ctx?.related?.hosts != ctx?.host?.hostname server?.domain)","lang":"painless","position":{"offset":150,"start":125,"end":175}}],"type":"script_exception","reason":"compile error","processor_type":"append","script_stack":["... ains(ctx?.host?.hostname server?.domain)) || ctx?. ..."," ^---- HERE"],"script":"ctx?.host?.hostname != null && ctx.host?.hostname != '' && ((ctx?.related?.hosts instanceof List && !ctx?.related?.hosts.contains(ctx?.host?.hostname server?.domain)) || ctx?.related?.hosts != ctx?.host?.hostname server?.domain)","lang":"painless","position":{"offset":150,"start":125,"end":175},"caused_by":{"type":"illegal_argument_exception","reason":"invalid sequence of tokens near ['server'].","caused_by":{"type":"no_viable_alt_exception","reason":null}}},"status":400}

Seems to be an error introduced in the last changes I did to some of the pipelines, will check if there are others and open a PR fixing it.