Skip to content

Commit 0dfc25d

Browse files
kcreddykcreddy
committed
Merge remote-tracking branch 'upstream/main' into cspm-aws_securityhub
2 parents 451cae9 + 8882cd4 commit 0dfc25d

1,766 files changed

Lines changed: 139665 additions & 71133 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.buildkite/pipeline.schedule-daily.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -26,13 +26,13 @@ steps:
2626
- step: "check"
2727
allow_failure: false
2828

29-
- label: "Check integrations local stacks - Stack Version v8.16"
29+
- label: "Check integrations local stacks - Stack Version v8.17"
3030
trigger: "integrations"
3131
build:
3232
env:
3333
SERVERLESS: "false"
3434
FORCE_CHECK_ALL: "true"
35-
STACK_VERSION: 8.16.0-SNAPSHOT
35+
STACK_VERSION: 8.17.0-SNAPSHOT
3636
PUBLISH_COVERAGE_REPORTS: "true"
3737
depends_on:
3838
- step: "check"
@@ -44,7 +44,7 @@ steps:
4444
env:
4545
SERVERLESS: "false"
4646
FORCE_CHECK_ALL: "true"
47-
STACK_VERSION: 8.16.0-SNAPSHOT
47+
STACK_VERSION: 8.17.0-SNAPSHOT
4848
STACK_LOGSDB_ENABLED: "true"
4949
PUBLISH_COVERAGE_REPORTS: "false"
5050
depends_on:

‎.buildkite/pipeline.schedule-weekly.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,13 +15,13 @@ steps:
1515
cpu: "8"
1616
memory: "4G"
1717

18-
- label: "Check integrations local stacks and Elastic Agent Ubuntu docker - Stack Version v8.16"
18+
- label: "Check integrations local stacks and Elastic Agent Ubuntu docker - Stack Version v8.17"
1919
trigger: "integrations"
2020
build:
2121
env:
2222
SERVERLESS: "false"
2323
FORCE_CHECK_ALL: "true"
24-
STACK_VERSION: 8.16.0-SNAPSHOT
24+
STACK_VERSION: 8.17.0-SNAPSHOT
2525
PUBLISH_COVERAGE_REPORTS: "false"
2626
ELASTIC_PACKAGE_DISABLE_ELASTIC_AGENT_WOLFI: "true"
2727
depends_on:

‎.github/CODEOWNERS‎

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -128,6 +128,7 @@
128128
/packages/cel @elastic/security-service-integrations
129129
/packages/ceph @elastic/obs-infraobs-integrations
130130
/packages/checkpoint @elastic/sec-deployment-and-devices
131+
/packages/checkpoint_harmony_endpoint @elastic/security-service-integrations
131132
/packages/cisa_kevs @elastic/security-service-integrations
132133
/packages/cisco_aironet @elastic/sec-deployment-and-devices
133134
/packages/cisco_asa @elastic/sec-deployment-and-devices
@@ -289,6 +290,7 @@
289290
/packages/network_traffic @elastic/sec-linux-platform
290291
/packages/nginx @elastic/obs-infraobs-integrations
291292
/packages/nginx_ingress_controller @elastic/obs-cloudnative-monitoring
293+
/packages/nginx_ingress_controller_otel @elastic/obs-infraobs-integrations
292294
/packages/o365 @elastic/security-service-integrations
293295
/packages/okta @elastic/security-service-integrations
294296
/packages/opencanary @elastic/security-service-integrations
@@ -346,8 +348,8 @@
346348
/packages/symantec_edr_cloud @elastic/security-service-integrations
347349
/packages/symantec_endpoint @elastic/security-service-integrations
348350
/packages/symantec_endpoint_security @elastic/security-service-integrations
349-
/packages/synthetics @elastic/obs-ux-infra_services-team
350-
/packages/synthetics_dashboards @elastic/obs-ux-infra_services-team
351+
/packages/synthetics @elastic/obs-ux-management-team
352+
/packages/synthetics_dashboards @elastic/obs-ux-management-team
351353
/packages/sysdig @elastic/security-service-integrations
352354
/packages/sysmon_linux @elastic/sec-linux-platform
353355
/packages/system @elastic/obs-infraobs-integrations
@@ -435,4 +437,4 @@
435437
/packages/zscaler_zia @elastic/security-service-integrations
436438
/packages/zscaler_zpa @elastic/security-service-integrations
437439
/packages/cisco_meraki_metrics @elastic/obs-infraobs-integrations
438-
/packages/panw_metrics @elastic/obs-infraobs-integrations
440+
/packages/panw_metrics @elastic/obs-infraobs-integrations

‎.github/ISSUE_TEMPLATE/integration_bug.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -64,6 +64,7 @@ body:
6464
- Custom API using Common Expression Language [cel]
6565
- Ceph [ceph]
6666
- Check Point [checkpoint]
67+
- Check Point Harmony Endpoint [checkpoint_harmony_endpoint]
6768
- CISA Known Exploited Vulnerabilities [cisa_kevs]
6869
- Cisco Aironet [cisco_aironet]
6970
- Cisco ASA [cisco_asa]

‎go.mod‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,8 @@ toolchain go1.22.5
66

77
require (
88
github.com/blang/semver v3.5.1+incompatible
9-
github.com/cli/go-gh/v2 v2.10.0
10-
github.com/elastic/elastic-package v0.104.0
9+
github.com/cli/go-gh/v2 v2.11.0
10+
github.com/elastic/elastic-package v0.106.0
1111
github.com/elastic/go-licenser v0.4.2
1212
github.com/elastic/package-registry v1.25.0
1313
github.com/magefile/mage v1.15.0
@@ -62,7 +62,7 @@ require (
6262
github.com/elastic/go-windows v1.0.1 // indirect
6363
github.com/elastic/gojsonschema v1.2.1 // indirect
6464
github.com/elastic/kbncontent v0.1.4 // indirect
65-
github.com/elastic/package-spec/v3 v3.2.2 // indirect
65+
github.com/elastic/package-spec/v3 v3.3.0 // indirect
6666
github.com/emicklei/go-restful/v3 v3.12.1 // indirect
6767
github.com/evanphx/json-patch v5.9.0+incompatible // indirect
6868
github.com/evanphx/json-patch/v5 v5.9.0 // indirect
@@ -199,17 +199,17 @@ require (
199199
gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
200200
gopkg.in/inf.v0 v0.9.1 // indirect
201201
gopkg.in/yaml.v2 v2.4.0 // indirect
202-
helm.sh/helm/v3 v3.15.4 // indirect
202+
helm.sh/helm/v3 v3.16.2 // indirect
203203
howett.net/plist v1.0.0 // indirect
204-
k8s.io/api v0.31.0 // indirect
205-
k8s.io/apiextensions-apiserver v0.31.0 // indirect
206-
k8s.io/apimachinery v0.31.0 // indirect
207-
k8s.io/cli-runtime v0.31.0 // indirect
208-
k8s.io/client-go v0.31.0 // indirect
209-
k8s.io/component-base v0.31.0 // indirect
204+
k8s.io/api v0.31.1 // indirect
205+
k8s.io/apiextensions-apiserver v0.31.1 // indirect
206+
k8s.io/apimachinery v0.31.1 // indirect
207+
k8s.io/cli-runtime v0.31.1 // indirect
208+
k8s.io/client-go v0.31.1 // indirect
209+
k8s.io/component-base v0.31.1 // indirect
210210
k8s.io/klog/v2 v2.130.1 // indirect
211211
k8s.io/kube-openapi v0.0.0-20240903163716-9e1beecbcb38 // indirect
212-
k8s.io/kubectl v0.31.0 // indirect
212+
k8s.io/kubectl v0.31.1 // indirect
213213
k8s.io/utils v0.0.0-20240902221715-702e33fdd3c3 // indirect
214214
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
215215
sigs.k8s.io/kustomize/api v0.17.3 // indirect

‎go.sum‎

Lines changed: 22 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -80,8 +80,8 @@ github.com/charmbracelet/lipgloss v0.10.1-0.20240413172830-d0be07ea6b9c h1:0FwZb
8080
github.com/charmbracelet/lipgloss v0.10.1-0.20240413172830-d0be07ea6b9c/go.mod h1:EPP2QJ0ectp3zo6gx9f8oJGq8keirqPJ3XpYEI8wrrs=
8181
github.com/charmbracelet/x/exp/term v0.0.0-20240425164147-ba2a9512b05f h1:1BXkZqDueTOBECyDoFGRi0xMYgjJ6vvoPIkWyKOwzTc=
8282
github.com/charmbracelet/x/exp/term v0.0.0-20240425164147-ba2a9512b05f/go.mod h1:yQqGHmheaQfkqiJWjklPHVAq1dKbk8uGbcoS/lcKCJ0=
83-
github.com/cli/go-gh/v2 v2.10.0 h1:GMflBKoErBXlLvN2euxzL+p7JaM8erlSmw0cT7uZr7M=
84-
github.com/cli/go-gh/v2 v2.10.0/go.mod h1:MeRoKzXff3ygHu7zP+NVTT+imcHW6p3tpuxHAzRM2xE=
83+
github.com/cli/go-gh/v2 v2.11.0 h1:TERLYMMWderKBO3lBff/JIu2+eSly2oFRgN2WvO+3eA=
84+
github.com/cli/go-gh/v2 v2.11.0/go.mod h1:MeRoKzXff3ygHu7zP+NVTT+imcHW6p3tpuxHAzRM2xE=
8585
github.com/cli/safeexec v1.0.0 h1:0VngyaIyqACHdcMNWfo6+KdUYnqEr2Sg+bSP1pdF+dI=
8686
github.com/cli/safeexec v1.0.0/go.mod h1:Z/D4tTN8Vs5gXYHDCbaM1S/anmEDnJb1iW0+EJ5zx3Q=
8787
github.com/cli/shurcooL-graphql v0.0.4 h1:6MogPnQJLjKkaXPyGqPRXOI2qCsQdqNfUY1QSJu2GuY=
@@ -108,8 +108,8 @@ github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkp
108108
github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto=
109109
github.com/elastic/elastic-integration-corpus-generator-tool v0.10.0 h1:sx1lpZuTG5suJuvgix4FWQFCLFFbzkoOmPoHWYOPLCY=
110110
github.com/elastic/elastic-integration-corpus-generator-tool v0.10.0/go.mod h1:2/30n+2QRzRzus4TPVUV1T3U/j8g2ItUgvP0pcpjLGk=
111-
github.com/elastic/elastic-package v0.104.0 h1:OicSOpASVNoCa+EMqxP+edH5AvOfES4FmGirDnYqYSc=
112-
github.com/elastic/elastic-package v0.104.0/go.mod h1:2DDsLKQyN3paH60XGJQfulLYloLPVtu9vK+i2iFoNys=
111+
github.com/elastic/elastic-package v0.106.0 h1:jSpjcv+GxwMCiDyV6ionWldXcH7WEo46Bu31cz/s2nk=
112+
github.com/elastic/elastic-package v0.106.0/go.mod h1:hzkfiN/jSsfXm512Naojfy30Xlcnf14jjYpw4p9Td2s=
113113
github.com/elastic/go-elasticsearch/v7 v7.17.10 h1:TCQ8i4PmIJuBunvBS6bwT2ybzVFxxUhhltAs3Gyu1yo=
114114
github.com/elastic/go-elasticsearch/v7 v7.17.10/go.mod h1:OJ4wdbtDNk5g503kvlHLyErCgQwwzmDtaFC4XyOxXA4=
115115
github.com/elastic/go-licenser v0.4.2 h1:bPbGm8bUd8rxzSswFOqvQh1dAkKGkgAmrPxbUi+Y9+A=
@@ -128,8 +128,8 @@ github.com/elastic/kbncontent v0.1.4 h1:GoUkJkqkn2H6iJTnOHcxEqYVVYyjvcebLQVaSR1a
128128
github.com/elastic/kbncontent v0.1.4/go.mod h1:kOPREITK9gSJsiw/WKe7QWSO+PRiZMyEFQCw+CMLAHI=
129129
github.com/elastic/package-registry v1.25.0 h1:41iQHERvcpPfdUTSYrw2Cfa0LtYWiEQgnTx6Qr6/Iro=
130130
github.com/elastic/package-registry v1.25.0/go.mod h1:wTbMbItNmw74Yfvk8OvRUFrta8ZsaTuKN4MSQ9DQpnE=
131-
github.com/elastic/package-spec/v3 v3.2.2 h1:ZVJxt4Icpys4sSI35tBKj/hlozdMQEcTBFnVb6hbNbE=
132-
github.com/elastic/package-spec/v3 v3.2.2/go.mod h1:RB/f2+00YBBMlFXF0DVHYv/znnmqkkZmD4F50azVRDE=
131+
github.com/elastic/package-spec/v3 v3.3.0 h1:bm7JjqGQ+XG49u2xK6rswr40WfUtRy3kRrNNN03Qp6A=
132+
github.com/elastic/package-spec/v3 v3.3.0/go.mod h1:RB/f2+00YBBMlFXF0DVHYv/znnmqkkZmD4F50azVRDE=
133133
github.com/emicklei/go-restful/v3 v3.12.1 h1:PJMDIM/ak7btuL8Ex0iYET9hxM3CI2sjZtzpL63nKAU=
134134
github.com/emicklei/go-restful/v3 v3.12.1/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
135135
github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
@@ -656,30 +656,30 @@ gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
656656
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
657657
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
658658
gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
659-
helm.sh/helm/v3 v3.15.4 h1:UFHd6oZ1IN3FsUZ7XNhOQDyQ2QYknBNWRHH57e9cbHY=
660-
helm.sh/helm/v3 v3.15.4/go.mod h1:phOwlxqGSgppCY/ysWBNRhG3MtnpsttOzxaTK+Mt40E=
659+
helm.sh/helm/v3 v3.16.2 h1:Y9v7ry+ubQmi+cb5zw1Llx8OKHU9Hk9NQ/+P+LGBe2o=
660+
helm.sh/helm/v3 v3.16.2/go.mod h1:SyTXgKBjNqi2NPsHCW5dDAsHqvGIu0kdNYNH9gQaw70=
661661
honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
662662
honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
663663
howett.net/plist v1.0.0 h1:7CrbWYbPPO/PyNy38b2EB/+gYbjCe2DXBxgtOOZbSQM=
664664
howett.net/plist v1.0.0/go.mod h1:lqaXoTrLY4hg8tnEzNru53gicrbv7rrk+2xJA/7hw9g=
665-
k8s.io/api v0.31.0 h1:b9LiSjR2ym/SzTOlfMHm1tr7/21aD7fSkqgD/CVJBCo=
666-
k8s.io/api v0.31.0/go.mod h1:0YiFF+JfFxMM6+1hQei8FY8M7s1Mth+z/q7eF1aJkTE=
667-
k8s.io/apiextensions-apiserver v0.31.0 h1:fZgCVhGwsclj3qCw1buVXCV6khjRzKC5eCFt24kyLSk=
668-
k8s.io/apiextensions-apiserver v0.31.0/go.mod h1:b9aMDEYaEe5sdK+1T0KU78ApR/5ZVp4i56VacZYEHxk=
669-
k8s.io/apimachinery v0.31.0 h1:m9jOiSr3FoSSL5WO9bjm1n6B9KROYYgNZOb4tyZ1lBc=
670-
k8s.io/apimachinery v0.31.0/go.mod h1:rsPdaZJfTfLsNJSQzNHQvYoTmxhoOEofxtOsF3rtsMo=
671-
k8s.io/cli-runtime v0.31.0 h1:V2Q1gj1u3/WfhD475HBQrIYsoryg/LrhhK4RwpN+DhA=
672-
k8s.io/cli-runtime v0.31.0/go.mod h1:vg3H94wsubuvWfSmStDbekvbla5vFGC+zLWqcf+bGDw=
673-
k8s.io/client-go v0.31.0 h1:QqEJzNjbN2Yv1H79SsS+SWnXkBgVu4Pj3CJQgbx0gI8=
674-
k8s.io/client-go v0.31.0/go.mod h1:Y9wvC76g4fLjmU0BA+rV+h2cncoadjvjjkkIGoTLcGU=
675-
k8s.io/component-base v0.31.0 h1:/KIzGM5EvPNQcYgwq5NwoQBaOlVFrghoVGr8lG6vNRs=
676-
k8s.io/component-base v0.31.0/go.mod h1:TYVuzI1QmN4L5ItVdMSXKvH7/DtvIuas5/mm8YT3rTo=
665+
k8s.io/api v0.31.1 h1:Xe1hX/fPW3PXYYv8BlozYqw63ytA92snr96zMW9gWTU=
666+
k8s.io/api v0.31.1/go.mod h1:sbN1g6eY6XVLeqNsZGLnI5FwVseTrZX7Fv3O26rhAaI=
667+
k8s.io/apiextensions-apiserver v0.31.1 h1:L+hwULvXx+nvTYX/MKM3kKMZyei+UiSXQWciX/N6E40=
668+
k8s.io/apiextensions-apiserver v0.31.1/go.mod h1:tWMPR3sgW+jsl2xm9v7lAyRF1rYEK71i9G5dRtkknoQ=
669+
k8s.io/apimachinery v0.31.1 h1:mhcUBbj7KUjaVhyXILglcVjuS4nYXiwC+KKFBgIVy7U=
670+
k8s.io/apimachinery v0.31.1/go.mod h1:rsPdaZJfTfLsNJSQzNHQvYoTmxhoOEofxtOsF3rtsMo=
671+
k8s.io/cli-runtime v0.31.1 h1:/ZmKhmZ6hNqDM+yf9s3Y4KEYakNXUn5sod2LWGGwCuk=
672+
k8s.io/cli-runtime v0.31.1/go.mod h1:pKv1cDIaq7ehWGuXQ+A//1OIF+7DI+xudXtExMCbe9U=
673+
k8s.io/client-go v0.31.1 h1:f0ugtWSbWpxHR7sjVpQwuvw9a3ZKLXX0u0itkFXufb0=
674+
k8s.io/client-go v0.31.1/go.mod h1:sKI8871MJN2OyeqRlmA4W4KM9KBdBUpDLu/43eGemCg=
675+
k8s.io/component-base v0.31.1 h1:UpOepcrX3rQ3ab5NB6g5iP0tvsgJWzxTyAo20sgYSy8=
676+
k8s.io/component-base v0.31.1/go.mod h1:WGeaw7t/kTsqpVTaCoVEtillbqAhF2/JgvO0LDOMa0w=
677677
k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
678678
k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
679679
k8s.io/kube-openapi v0.0.0-20240903163716-9e1beecbcb38 h1:1dWzkmJrrprYvjGwh9kEUxmcUV/CtNU8QM7h1FLWQOo=
680680
k8s.io/kube-openapi v0.0.0-20240903163716-9e1beecbcb38/go.mod h1:coRQXBK9NxO98XUv3ZD6AK3xzHCxV6+b7lrquKwaKzA=
681-
k8s.io/kubectl v0.31.0 h1:kANwAAPVY02r4U4jARP/C+Q1sssCcN/1p9Nk+7BQKVg=
682-
k8s.io/kubectl v0.31.0/go.mod h1:pB47hhFypGsaHAPjlwrNbvhXgmuAr01ZBvAIIUaI8d4=
681+
k8s.io/kubectl v0.31.1 h1:ih4JQJHxsEggFqDJEHSOdJ69ZxZftgeZvYo7M/cpp24=
682+
k8s.io/kubectl v0.31.1/go.mod h1:aNuQoR43W6MLAtXQ/Bu4GDmoHlbhHKuyD49lmTC8eJM=
683683
k8s.io/utils v0.0.0-20240902221715-702e33fdd3c3 h1:b2FmK8YH+QEwq/Sy2uAEhmqL5nPfGYbJOcaqjeYYZoA=
684684
k8s.io/utils v0.0.0-20240902221715-702e33fdd3c3/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
685685
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo=

‎packages/akamai/_dev/build/docs/README.md‎

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,13 +6,13 @@ The Akamai integration collects events from the Akamai API, specifically reading
66

77
### SIEM
88

9-
The Security Information and Event Management API allows you to capture security events generated on the ​Akamai​ platform in your SIEM application.
9+
The Security Information and Event Management API allows you to capture security events generated on the Akamai platform in your SIEM application.
1010

11-
Use this API to get security event data generated on the ​Akamai​ platform and correlate it with data from other sources in your SIEM solution. Capture security event data incrementally, or replay missed security events from the past 12 hours. You can store, query, and analyze the data delivered through this API on your end, then go back and adjust your Akamai security settings. If you’re coding your own SIEM connector, it needs to adhere to these specifications in order to pull in security events from Akamai Security Events Collector (ASEC) and process them properly.
11+
Use this API to get security event data generated on the Akamai platform and correlate it with data from other sources in your SIEM solution. Capture security event data incrementally, or replay missed security events from the past 12 hours. You can store, query, and analyze the data delivered through this API on your end, then go back and adjust your Akamai security settings. If you’re coding your own SIEM connector, it needs to adhere to these specifications in order to pull in security events from Akamai Security Events Collector (ASEC) and process them properly.
1212

1313
See [Akamai API get started](https://techdocs.akamai.com/siem-integration/reference/api-get-started) to set up your Akamai account and get your credentials.
1414

15-
### To collect data from GCS Bucket [Beta], follow the below steps:
15+
### To collect data from GCS Bucket, follow the below steps:
1616
- Configure the [Data Forwarder](https://techdocs.akamai.com/datastream2/docs/stream-google-cloud/) to ingest data into a GCS bucket.
1717
- Configure the GCS bucket names and credentials along with the required configs under the "Collect Akamai SIEM logs via Google Cloud Storage" section.
1818
- Make sure the service account and authentication being used, has proper levels of access to the GCS bucket [Manage Service Account Keys](https://cloud.google.com/iam/docs/creating-managing-service-account-keys/)
@@ -21,7 +21,6 @@ See [Akamai API get started](https://techdocs.akamai.com/siem-integration/refere
2121
- The GCS input currently does not support fetching of buckets using bucket prefixes, so the bucket names have to be configured manually for each data stream.
2222
- The GCS input currently only accepts a service account JSON key or a service account JSON file for authentication.
2323
- The GCS input currently only supports JSON data.
24-
- This input is still in beta.
2524

2625
{{fields "siem"}}
2726

‎packages/akamai/changelog.yml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,9 @@
11
# newer versions go on top
2+
- version: "2.25.4"
3+
changes:
4+
- description: Remove experimental/beta status warnings.
5+
type: bugfix
6+
link: https://github.com/elastic/integrations/pull/11474
27
- version: "2.25.3"
38
changes:
49
- description: Use triple-brace Mustache templating when referencing variables in ingest pipelines.

‎packages/akamai/data_stream/siem/manifest.yml‎

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,5 @@
11
type: logs
22
title: Akamai SIEM Logs
3-
release: experimental
43
streams:
54
- input: httpjson
65
template_path: httpjson.yml.hbs
@@ -124,7 +123,7 @@ streams:
124123
The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-httpjson.html#_request_tracer_filename) for details.
125124
126125
- input: gcs
127-
title: Collect Akamai SIEM logs via Google Cloud Storage [Beta]
126+
title: Collect Akamai SIEM logs via Google Cloud Storage
128127
description: Collecting SIEM logs from Akamai via Google Cloud Storage.
129128
template_path: gcs.yml.hbs
130129
vars:

‎packages/akamai/docs/README.md‎

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,13 +6,13 @@ The Akamai integration collects events from the Akamai API, specifically reading
66

77
### SIEM
88

9-
The Security Information and Event Management API allows you to capture security events generated on the ​Akamai​ platform in your SIEM application.
9+
The Security Information and Event Management API allows you to capture security events generated on the Akamai platform in your SIEM application.
1010

11-
Use this API to get security event data generated on the ​Akamai​ platform and correlate it with data from other sources in your SIEM solution. Capture security event data incrementally, or replay missed security events from the past 12 hours. You can store, query, and analyze the data delivered through this API on your end, then go back and adjust your Akamai security settings. If you’re coding your own SIEM connector, it needs to adhere to these specifications in order to pull in security events from Akamai Security Events Collector (ASEC) and process them properly.
11+
Use this API to get security event data generated on the Akamai platform and correlate it with data from other sources in your SIEM solution. Capture security event data incrementally, or replay missed security events from the past 12 hours. You can store, query, and analyze the data delivered through this API on your end, then go back and adjust your Akamai security settings. If you’re coding your own SIEM connector, it needs to adhere to these specifications in order to pull in security events from Akamai Security Events Collector (ASEC) and process them properly.
1212

1313
See [Akamai API get started](https://techdocs.akamai.com/siem-integration/reference/api-get-started) to set up your Akamai account and get your credentials.
1414

15-
### To collect data from GCS Bucket [Beta], follow the below steps:
15+
### To collect data from GCS Bucket, follow the below steps:
1616
- Configure the [Data Forwarder](https://techdocs.akamai.com/datastream2/docs/stream-google-cloud/) to ingest data into a GCS bucket.
1717
- Configure the GCS bucket names and credentials along with the required configs under the "Collect Akamai SIEM logs via Google Cloud Storage" section.
1818
- Make sure the service account and authentication being used, has proper levels of access to the GCS bucket [Manage Service Account Keys](https://cloud.google.com/iam/docs/creating-managing-service-account-keys/)
@@ -21,7 +21,6 @@ See [Akamai API get started](https://techdocs.akamai.com/siem-integration/refere
2121
- The GCS input currently does not support fetching of buckets using bucket prefixes, so the bucket names have to be configured manually for each data stream.
2222
- The GCS input currently only accepts a service account JSON key or a service account JSON file for authentication.
2323
- The GCS input currently only supports JSON data.
24-
- This input is still in beta.
2524

2625
**Exported fields**
2726

0 commit comments

Comments
 (0)