Skip to content

Commit 5631dc8

Browse files
shmsrshmsr
authored
Merge branch 'main' into fix-527
2 parents 07131c5 + e46f81d commit 5631dc8

File tree

216 files changed

+9113
-1170
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

216 files changed

+9113
-1170
lines changed

‎packages/1password/_dev/deploy/docker/config.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ rules:
4343
Content-Type:
4444
- "application/json; charset=utf-8"
4545
body: |-
46-
{"cursor":"cursor_1","has_more":false,"items":[]}
46+
{"has_more":false,"items":[]}
4747
# SignInAttempts
4848
- path: /api/v1/signinattempts
4949
methods: ["POST"]
@@ -89,7 +89,7 @@ rules:
8989
Content-Type:
9090
- "application/json; charset=utf-8"
9191
body: |-
92-
{"cursor":"cursor_1","has_more":false,"items":[]}
92+
{"has_more":false,"items":[]}
9393
- path: /api/v1/auditevents
9494
methods: ["POST"]
9595
request_headers:
@@ -104,7 +104,7 @@ rules:
104104
Content-Type:
105105
- "application/json; charset=utf-8"
106106
body: |-
107-
{"cursor":"cursor_0","has_more":false,"items":[{"uuid": "3UQOGUC7DVOCN4OZP2MDKHFLSG","timestamp": "2022-10-24T21:16:52.827288935Z","actor_uuid": "GLF6WUEKS5CSNDJ2OG6TCZD3M4","action": "suspend","object_type": "user","object_uuid":"ZRQCUD6A65AKHFETOUFO7NL4OM","session":{"uuid": "ODOHXUYQCJBUJKRGZNNPBJURPE","login_time": "2022-10-24T21:07:34.703106271Z","device_uuid":"rqtd557fn2husnstp5nc66w2xa","ip":"89.160.20.156"},"location":{"country":"Canada","region": "Ontario","city": "Toronto","latitude": 43.64,"longitude": -79.433}}]}
107+
{"cursor":"cursor_0","has_more":true,"items":[{"uuid": "3UQOGUC7DVOCN4OZP2MDKHFLSG","timestamp": "2022-10-24T21:16:52.827288935Z","actor_uuid": "GLF6WUEKS5CSNDJ2OG6TCZD3M4","action": "suspend","object_type": "user","object_uuid":"ZRQCUD6A65AKHFETOUFO7NL4OM","session":{"uuid": "ODOHXUYQCJBUJKRGZNNPBJURPE","login_time": "2022-10-24T21:07:34.703106271Z","device_uuid":"rqtd557fn2husnstp5nc66w2xa","ip":"89.160.20.156"},"location":{"country":"Canada","region": "Ontario","city": "Toronto","latitude": 43.64,"longitude": -79.433}}]}
108108
- path: /api/v1/auditevents
109109
methods: ["POST"]
110110
request_headers:
@@ -134,4 +134,4 @@ rules:
134134
Content-Type:
135135
- "application/json; charset=utf-8"
136136
body: |-
137-
{"cursor":"cursor_1","has_more":false,"items":[]}
137+
{"has_more":false,"items":[]}

‎packages/1password/changelog.yml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,9 @@
11
# newer versions go on top
2+
- version: "1.34.0"
3+
changes:
4+
- description: Prevent updating fleet health status to degraded.
5+
type: enhancement
6+
link: https://github.com/elastic/integrations/pull/15415
27
- version: "1.33.0"
38
changes:
49
- description: Enable Agentless deployment.

‎packages/1password/data_stream/audit_events/agent/stream/httpjson.yml.hbs‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,22 +28,26 @@ request.transforms:
2828
- set:
2929
target: body.cursor
3030
value: '[[if not (eq (len .cursor) 0)]][[.cursor.last_cursor]][[end]]'
31+
do_not_log_failure: true
3132
- set:
3233
target: body.limit
3334
value_type: int
3435
value: '[[if eq (len .cursor) 0]]{{limit}}[[end]]'
36+
do_not_log_failure: true
3537
cursor:
3638
last_cursor:
37-
value: '[[.last_response.body.cursor]]'
39+
value: '[[if index .last_response.body "cursor"]][[.last_response.body.cursor]][[end]]'
40+
ignore_empty_value: true
3841
response.decode_as: application/json
3942
response.split:
4043
target: body.items
4144
ignore_empty_value: true
4245
response.pagination:
4346
- set:
4447
target: body.cursor
45-
value: '[[.last_response.body.cursor]]'
48+
value: '[[if eq .last_response.body.has_more true]][[.last_response.body.cursor]][[end]]'
4649
fail_on_template_error: true
50+
do_not_log_failure: true
4751
- delete:
4852
target: body.limit
4953
tags:

‎packages/1password/data_stream/audit_events/sample_event.json‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,34 +1,34 @@
11
{
22
"@timestamp": "2022-10-24T21:16:52.827Z",
33
"agent": {
4-
"ephemeral_id": "995e038d-40af-4750-b916-48c4055eed99",
5-
"id": "fe01c3ff-fdb0-4ba7-be38-980c260f9cdb",
6-
"name": "elastic-agent-21286",
4+
"ephemeral_id": "8addaae9-87b5-4f3b-b998-54a98b2586f5",
5+
"id": "764d6ce1-2012-437a-a1e4-d6fc25cb83e6",
6+
"name": "elastic-agent-26645",
77
"type": "filebeat",
8-
"version": "8.16.0"
8+
"version": "8.19.4"
99
},
1010
"data_stream": {
1111
"dataset": "1password.audit_events",
12-
"namespace": "55736",
12+
"namespace": "75533",
1313
"type": "logs"
1414
},
1515
"ecs": {
1616
"version": "8.11.0"
1717
},
1818
"elastic_agent": {
19-
"id": "fe01c3ff-fdb0-4ba7-be38-980c260f9cdb",
20-
"snapshot": false,
21-
"version": "8.16.0"
19+
"id": "764d6ce1-2012-437a-a1e4-d6fc25cb83e6",
20+
"snapshot": true,
21+
"version": "8.19.4"
2222
},
2323
"event": {
2424
"action": "suspend",
2525
"agent_id_status": "verified",
2626
"category": [
2727
"configuration"
2828
],
29-
"created": "2024-11-22T16:09:59.842Z",
29+
"created": "2025-09-19T12:36:31.698Z",
3030
"dataset": "1password.audit_events",
31-
"ingested": "2024-11-22T16:10:02Z",
31+
"ingested": "2025-09-19T12:36:34Z",
3232
"kind": "event",
3333
"original": "{\"action\":\"suspend\",\"actor_uuid\":\"GLF6WUEKS5CSNDJ2OG6TCZD3M4\",\"location\":{\"city\":\"Toronto\",\"country\":\"Canada\",\"latitude\":43.64,\"longitude\":-79.433,\"region\":\"Ontario\"},\"object_type\":\"user\",\"object_uuid\":\"ZRQCUD6A65AKHFETOUFO7NL4OM\",\"session\":{\"device_uuid\":\"rqtd557fn2husnstp5nc66w2xa\",\"ip\":\"89.160.20.156\",\"login_time\":\"2022-10-24T21:07:34.703106271Z\",\"uuid\":\"ODOHXUYQCJBUJKRGZNNPBJURPE\"},\"timestamp\":\"2022-10-24T21:16:52.827288935Z\",\"uuid\":\"3UQOGUC7DVOCN4OZP2MDKHFLSG\"}",
3434
"type": [

‎packages/1password/data_stream/item_usages/agent/stream/httpjson.yml.hbs‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,22 +29,26 @@ request.transforms:
2929
- set:
3030
target: body.cursor
3131
value: '[[if not (eq (len .cursor) 0)]][[.cursor.last_cursor]][[end]]'
32+
do_not_log_failure: true
3233
- set:
3334
target: body.limit
3435
value_type: int
3536
value: '[[if eq (len .cursor) 0]]{{limit}}[[end]]'
37+
do_not_log_failure: true
3638
cursor:
3739
last_cursor:
38-
value: '[[.last_response.body.cursor]]'
40+
value: '[[if index .last_response.body "cursor"]][[.last_response.body.cursor]][[end]]'
41+
ignore_empty_value: true
3942
response.decode_as: application/json
4043
response.split:
4144
target: body.items
4245
ignore_empty_value: true
4346
response.pagination:
4447
- set:
4548
target: body.cursor
46-
value: '[[if eq .last_response.body.has_more true]][[.last_response.body.cursor]][[else]][[/*This is an empty value to stop pagination.*/]][[end]]'
49+
value: '[[if eq .last_response.body.has_more true]][[.last_response.body.cursor]][[end]]'
4750
fail_on_template_error: true
51+
do_not_log_failure: true
4852
- delete:
4953
target: body.limit
5054
tags:

‎packages/1password/data_stream/item_usages/sample_event.json‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,34 +1,34 @@
11
{
22
"@timestamp": "2021-08-30T18:57:42.484Z",
33
"agent": {
4-
"ephemeral_id": "21b6cbdd-1425-431c-9084-3acfc9545ac6",
5-
"id": "20659717-b9a7-45e9-86fe-616ccc8958c8",
6-
"name": "elastic-agent-67856",
4+
"ephemeral_id": "15ef1f40-9e00-477b-9aed-4672138ab4ab",
5+
"id": "8337aa82-bf10-4d6f-b937-95dd6db12de7",
6+
"name": "elastic-agent-33999",
77
"type": "filebeat",
8-
"version": "8.16.0"
8+
"version": "8.19.4"
99
},
1010
"data_stream": {
1111
"dataset": "1password.item_usages",
12-
"namespace": "45938",
12+
"namespace": "31026",
1313
"type": "logs"
1414
},
1515
"ecs": {
1616
"version": "8.11.0"
1717
},
1818
"elastic_agent": {
19-
"id": "20659717-b9a7-45e9-86fe-616ccc8958c8",
20-
"snapshot": false,
21-
"version": "8.16.0"
19+
"id": "8337aa82-bf10-4d6f-b937-95dd6db12de7",
20+
"snapshot": true,
21+
"version": "8.19.4"
2222
},
2323
"event": {
2424
"action": "reveal",
2525
"agent_id_status": "verified",
2626
"category": [
2727
"file"
2828
],
29-
"created": "2024-11-22T16:12:31.651Z",
29+
"created": "2025-09-19T12:37:21.588Z",
3030
"dataset": "1password.item_usages",
31-
"ingested": "2024-11-22T16:12:34Z",
31+
"ingested": "2025-09-19T12:37:24Z",
3232
"kind": "event",
3333
"original": "{\"action\":\"reveal\",\"client\":{\"app_name\":\"1Password Browser Extension\",\"app_version\":\"1109\",\"ip_address\":\"1.1.1.1\",\"os_name\":\"Android\",\"os_version\":\"10\",\"platform_name\":\"Chrome\",\"platform_version\":\"93.0.4577.62\"},\"item_uuid\":\"bvwmmwxisuca7wbehrbyqhag54\",\"location\":{\"city\":\"Toronto\",\"country\":\"Canada\",\"latitude\":43.64,\"longitude\":-79.433,\"region\":\"Ontario\"},\"timestamp\":\"2021-08-30T18:57:42.484Z\",\"used_version\":1,\"user\":{\"email\":\"email@1password.com\",\"name\":\"Name\",\"uuid\":\"OJQGU46KAPROEJLCK674RHSAY5\"},\"uuid\":\"MCQODBBWJD5HISKYNP3HJPV2DV\",\"vault_uuid\":\"jaqxqf5qylslqiitnduawrndc5\"}",
3434
"type": [

‎packages/1password/data_stream/signin_attempts/agent/stream/httpjson.yml.hbs‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,22 +29,26 @@ request.transforms:
2929
- set:
3030
target: body.cursor
3131
value: '[[if not (eq (len .cursor) 0)]][[.cursor.last_cursor]][[end]]'
32+
do_not_log_failure: true
3233
- set:
3334
target: body.limit
3435
value_type: int
3536
value: '[[if eq (len .cursor) 0]]{{limit}}[[end]]'
37+
do_not_log_failure: true
3638
cursor:
3739
last_cursor:
38-
value: '[[.last_response.body.cursor]]'
40+
value: '[[if index .last_response.body "cursor"]][[.last_response.body.cursor]][[end]]'
41+
ignore_empty_value: true
3942
response.decode_as: application/json
4043
response.split:
4144
target: body.items
4245
ignore_empty_value: true
4346
response.pagination:
4447
- set:
4548
target: body.cursor
46-
value: '[[if eq .last_response.body.has_more true]][[.last_response.body.cursor]][[else]][[/*This is an empty value to stop pagination.*/]][[end]]'
49+
value: '[[if eq .last_response.body.has_more true]][[.last_response.body.cursor]][[end]]'
4750
fail_on_template_error: true
51+
do_not_log_failure: true
4852
- delete:
4953
target: body.limit
5054
tags:

‎packages/1password/data_stream/signin_attempts/sample_event.json‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,34 +1,34 @@
11
{
22
"@timestamp": "2021-08-11T14:28:03.000Z",
33
"agent": {
4-
"ephemeral_id": "ad3b6f25-cc74-4188-90f5-5eb58cac50e6",
5-
"id": "20d847f6-71da-42b9-88c7-07d421e00fbb",
6-
"name": "elastic-agent-17935",
4+
"ephemeral_id": "ce227beb-fb58-4f3d-a379-0b3b0f163883",
5+
"id": "bb785601-3e94-4772-8d05-48517f9740bc",
6+
"name": "elastic-agent-11750",
77
"type": "filebeat",
8-
"version": "8.16.0"
8+
"version": "8.19.4"
99
},
1010
"data_stream": {
1111
"dataset": "1password.signin_attempts",
12-
"namespace": "94013",
12+
"namespace": "35031",
1313
"type": "logs"
1414
},
1515
"ecs": {
1616
"version": "8.11.0"
1717
},
1818
"elastic_agent": {
19-
"id": "20d847f6-71da-42b9-88c7-07d421e00fbb",
20-
"snapshot": false,
21-
"version": "8.16.0"
19+
"id": "bb785601-3e94-4772-8d05-48517f9740bc",
20+
"snapshot": true,
21+
"version": "8.19.4"
2222
},
2323
"event": {
2424
"action": "success",
2525
"agent_id_status": "verified",
2626
"category": [
2727
"authentication"
2828
],
29-
"created": "2024-11-22T16:13:30.707Z",
29+
"created": "2025-09-19T12:38:09.666Z",
3030
"dataset": "1password.signin_attempts",
31-
"ingested": "2024-11-22T16:13:33Z",
31+
"ingested": "2025-09-19T12:38:12Z",
3232
"kind": "event",
3333
"original": "{\"category\":\"success\",\"client\":{\"app_name\":\"1Password Browser Extension\",\"app_version\":\"1109\",\"ip_address\":\"1.1.1.1\",\"os_name\":\"Android\",\"os_version\":\"10\",\"platform_name\":\"Chrome\",\"platform_version\":\"93.0.4577.62\"},\"country\":\"AR\",\"details\":null,\"session_uuid\":\"UED4KFZ5BH37IQWTJ7LG4VPWK7\",\"target_user\":{\"email\":\"email@1password.com\",\"name\":\"Name\",\"uuid\":\"OJQGU46KAPROEJLCK674RHSAY5\"},\"timestamp\":\"2021-08-11T14:28:03Z\",\"type\":\"credentials_ok\",\"uuid\":\"HGIF4OEWXDTVWKEQDIWTKV26HU\"}",
3434
"outcome": "success",

‎packages/1password/docs/README.md‎

Lines changed: 30 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -56,34 +56,34 @@ An example event for `signin_attempts` looks as following:
5656
{
5757
"@timestamp": "2021-08-11T14:28:03.000Z",
5858
"agent": {
59-
"ephemeral_id": "ad3b6f25-cc74-4188-90f5-5eb58cac50e6",
60-
"id": "20d847f6-71da-42b9-88c7-07d421e00fbb",
61-
"name": "elastic-agent-17935",
59+
"ephemeral_id": "ce227beb-fb58-4f3d-a379-0b3b0f163883",
60+
"id": "bb785601-3e94-4772-8d05-48517f9740bc",
61+
"name": "elastic-agent-11750",
6262
"type": "filebeat",
63-
"version": "8.16.0"
63+
"version": "8.19.4"
6464
},
6565
"data_stream": {
6666
"dataset": "1password.signin_attempts",
67-
"namespace": "94013",
67+
"namespace": "35031",
6868
"type": "logs"
6969
},
7070
"ecs": {
7171
"version": "8.11.0"
7272
},
7373
"elastic_agent": {
74-
"id": "20d847f6-71da-42b9-88c7-07d421e00fbb",
75-
"snapshot": false,
76-
"version": "8.16.0"
74+
"id": "bb785601-3e94-4772-8d05-48517f9740bc",
75+
"snapshot": true,
76+
"version": "8.19.4"
7777
},
7878
"event": {
7979
"action": "success",
8080
"agent_id_status": "verified",
8181
"category": [
8282
"authentication"
8383
],
84-
"created": "2024-11-22T16:13:30.707Z",
84+
"created": "2025-09-19T12:38:09.666Z",
8585
"dataset": "1password.signin_attempts",
86-
"ingested": "2024-11-22T16:13:33Z",
86+
"ingested": "2025-09-19T12:38:12Z",
8787
"kind": "event",
8888
"original": "{\"category\":\"success\",\"client\":{\"app_name\":\"1Password Browser Extension\",\"app_version\":\"1109\",\"ip_address\":\"1.1.1.1\",\"os_name\":\"Android\",\"os_version\":\"10\",\"platform_name\":\"Chrome\",\"platform_version\":\"93.0.4577.62\"},\"country\":\"AR\",\"details\":null,\"session_uuid\":\"UED4KFZ5BH37IQWTJ7LG4VPWK7\",\"target_user\":{\"email\":\"email@1password.com\",\"name\":\"Name\",\"uuid\":\"OJQGU46KAPROEJLCK674RHSAY5\"},\"timestamp\":\"2021-08-11T14:28:03Z\",\"type\":\"credentials_ok\",\"uuid\":\"HGIF4OEWXDTVWKEQDIWTKV26HU\"}",
8989
"outcome": "success",
@@ -172,34 +172,34 @@ An example event for `item_usages` looks as following:
172172
{
173173
"@timestamp": "2021-08-30T18:57:42.484Z",
174174
"agent": {
175-
"ephemeral_id": "21b6cbdd-1425-431c-9084-3acfc9545ac6",
176-
"id": "20659717-b9a7-45e9-86fe-616ccc8958c8",
177-
"name": "elastic-agent-67856",
175+
"ephemeral_id": "15ef1f40-9e00-477b-9aed-4672138ab4ab",
176+
"id": "8337aa82-bf10-4d6f-b937-95dd6db12de7",
177+
"name": "elastic-agent-33999",
178178
"type": "filebeat",
179-
"version": "8.16.0"
179+
"version": "8.19.4"
180180
},
181181
"data_stream": {
182182
"dataset": "1password.item_usages",
183-
"namespace": "45938",
183+
"namespace": "31026",
184184
"type": "logs"
185185
},
186186
"ecs": {
187187
"version": "8.11.0"
188188
},
189189
"elastic_agent": {
190-
"id": "20659717-b9a7-45e9-86fe-616ccc8958c8",
191-
"snapshot": false,
192-
"version": "8.16.0"
190+
"id": "8337aa82-bf10-4d6f-b937-95dd6db12de7",
191+
"snapshot": true,
192+
"version": "8.19.4"
193193
},
194194
"event": {
195195
"action": "reveal",
196196
"agent_id_status": "verified",
197197
"category": [
198198
"file"
199199
],
200-
"created": "2024-11-22T16:12:31.651Z",
200+
"created": "2025-09-19T12:37:21.588Z",
201201
"dataset": "1password.item_usages",
202-
"ingested": "2024-11-22T16:12:34Z",
202+
"ingested": "2025-09-19T12:37:24Z",
203203
"kind": "event",
204204
"original": "{\"action\":\"reveal\",\"client\":{\"app_name\":\"1Password Browser Extension\",\"app_version\":\"1109\",\"ip_address\":\"1.1.1.1\",\"os_name\":\"Android\",\"os_version\":\"10\",\"platform_name\":\"Chrome\",\"platform_version\":\"93.0.4577.62\"},\"item_uuid\":\"bvwmmwxisuca7wbehrbyqhag54\",\"location\":{\"city\":\"Toronto\",\"country\":\"Canada\",\"latitude\":43.64,\"longitude\":-79.433,\"region\":\"Ontario\"},\"timestamp\":\"2021-08-30T18:57:42.484Z\",\"used_version\":1,\"user\":{\"email\":\"email@1password.com\",\"name\":\"Name\",\"uuid\":\"OJQGU46KAPROEJLCK674RHSAY5\"},\"uuid\":\"MCQODBBWJD5HISKYNP3HJPV2DV\",\"vault_uuid\":\"jaqxqf5qylslqiitnduawrndc5\"}",
205205
"type": [
@@ -299,34 +299,34 @@ An example event for `audit_events` looks as following:
299299
{
300300
"@timestamp": "2022-10-24T21:16:52.827Z",
301301
"agent": {
302-
"ephemeral_id": "995e038d-40af-4750-b916-48c4055eed99",
303-
"id": "fe01c3ff-fdb0-4ba7-be38-980c260f9cdb",
304-
"name": "elastic-agent-21286",
302+
"ephemeral_id": "8addaae9-87b5-4f3b-b998-54a98b2586f5",
303+
"id": "764d6ce1-2012-437a-a1e4-d6fc25cb83e6",
304+
"name": "elastic-agent-26645",
305305
"type": "filebeat",
306-
"version": "8.16.0"
306+
"version": "8.19.4"
307307
},
308308
"data_stream": {
309309
"dataset": "1password.audit_events",
310-
"namespace": "55736",
310+
"namespace": "75533",
311311
"type": "logs"
312312
},
313313
"ecs": {
314314
"version": "8.11.0"
315315
},
316316
"elastic_agent": {
317-
"id": "fe01c3ff-fdb0-4ba7-be38-980c260f9cdb",
318-
"snapshot": false,
319-
"version": "8.16.0"
317+
"id": "764d6ce1-2012-437a-a1e4-d6fc25cb83e6",
318+
"snapshot": true,
319+
"version": "8.19.4"
320320
},
321321
"event": {
322322
"action": "suspend",
323323
"agent_id_status": "verified",
324324
"category": [
325325
"configuration"
326326
],
327-
"created": "2024-11-22T16:09:59.842Z",
327+
"created": "2025-09-19T12:36:31.698Z",
328328
"dataset": "1password.audit_events",
329-
"ingested": "2024-11-22T16:10:02Z",
329+
"ingested": "2025-09-19T12:36:34Z",
330330
"kind": "event",
331331
"original": "{\"action\":\"suspend\",\"actor_uuid\":\"GLF6WUEKS5CSNDJ2OG6TCZD3M4\",\"location\":{\"city\":\"Toronto\",\"country\":\"Canada\",\"latitude\":43.64,\"longitude\":-79.433,\"region\":\"Ontario\"},\"object_type\":\"user\",\"object_uuid\":\"ZRQCUD6A65AKHFETOUFO7NL4OM\",\"session\":{\"device_uuid\":\"rqtd557fn2husnstp5nc66w2xa\",\"ip\":\"89.160.20.156\",\"login_time\":\"2022-10-24T21:07:34.703106271Z\",\"uuid\":\"ODOHXUYQCJBUJKRGZNNPBJURPE\"},\"timestamp\":\"2022-10-24T21:16:52.827288935Z\",\"uuid\":\"3UQOGUC7DVOCN4OZP2MDKHFLSG\"}",
332332
"type": [

0 commit comments

Comments
 (0)