Update Deployment and Devices integrations to ECS 8.17.0 (part 4) by taylor-swanson · Pull Request #12574 · elastic/integrations

taylor-swanson · 2025-02-03T17:07:56Z

Proposed commit message

Updates the following integrations to ECS 8.17.0:

qnap_nas
snort
sonicwall_firewall
sophos
squid
stormshield
suricata
tcp
udp
watchguard_firebox
zeek

Checklist

I have reviewed tips for building integrations and this pull request is aligned with them.
I have verified that all data streams collect metrics or logs.
I have added an entry to my package's changelog.yml file.
I have verified that Kibana version constraints are current according to guidelines.
~~[ ] I have verified that any added dashboard complies with Kibana's Dashboard good practices~~

Related issues

Relates [meta] Upgrade integrations to ECS 8.17 #11952

elasticmachine · 2025-02-03T18:19:56Z

Pinging @elastic/sec-deployment-and-devices (Team:Security-Deployment and Devices)

dwhyrock · 2025-02-03T21:59:54Z

packages/snort/data_stream/log/_dev/test/pipeline/test-log-pfsense.log-expected.json

Must have hit 88mph generating these expected logs...

Uhhh... I seem to recall this coming up before. I'll investigate this further. I have no idea how it's getting that date, other than maybe some help from the Doc.

Okay figured it out, the time format mistakenly used "week-based-year" (Y) instead of "year-of-era" (y), which is more typical. The former gives very different results (as observed above). I'm going to fix that out-of-band since this is clearly a bug. (In fact, I think I had wrote a bug on this last time).

PR for snort fix is here: #12599

dwhyrock · 2025-02-03T22:03:32Z

packages/zeek/data_stream/irc/_dev/test/pipeline/test-irc.log-expected.json

ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. The set ecs.version processor in pipelines was changed 8.17.0. Previously the pipeline was setting version 8.11.0. The ecs.version in sample_event.json files was changed to 8.17.0. Previously sample_event.json files contained 8.11.0. [git-generate] go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/qnap_nas

ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. The set ecs.version processor in pipelines was changed 8.17.0. Previously the pipeline was setting version 8.11.0. The ecs.version in sample_event.json files was changed to 8.17.0. Previously sample_event.json files contained 8.11.0. [git-generate] go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/snort

ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. The set ecs.version processor in pipelines was changed 8.17.0. Previously the pipeline was setting version 8.11.0. The ecs.version in sample_event.json files was changed to 8.17.0. Previously sample_event.json files contained 8.11.0. [git-generate] go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/sonicwall_firewall

ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. The set ecs.version processor in pipelines was changed 8.17.0. Previously the pipeline was setting version 8.11.0. The ecs.version in sample_event.json files was changed to 8.17.0. Previously sample_event.json files contained 8.11.0. [git-generate] go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/sophos

ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. The set ecs.version processor in pipelines was changed 8.17.0. Previously the pipeline was setting version 8.11.0. The ecs.version in sample_event.json files was changed to 8.17.0. Previously sample_event.json files contained 8.11.0. [git-generate] go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/squid

ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. The set ecs.version processor in pipelines was changed 8.17.0. Previously the pipeline was setting version 8.11.0. The ecs.version in sample_event.json files was changed to 8.17.0. Previously sample_event.json files contained 8.11.0. [git-generate] go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/stormshield

ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. The set ecs.version processor in pipelines was changed 8.17.0. Previously the pipeline was setting version 8.11.0. The ecs.version in sample_event.json files was changed to 8.17.0. Previously sample_event.json files contained 8.11.0. [git-generate] go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/suricata

ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. The ecs.version in sample_event.json files was changed to 8.17.0. Previously sample_event.json files contained 8.11.0. [git-generate] go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/tcp

ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. [git-generate] go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/udp

ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. The set ecs.version processor in pipelines was changed 8.17.0. Previously the pipeline was setting version 8.11.0. The ecs.version in sample_event.json files was changed to 8.17.0. Previously sample_event.json files contained 8.11.0. [git-generate] go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/watchguard_firebox

ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. The set ecs.version processor in pipelines was changed 8.17.0. Previously the pipeline was setting version 8.11.0. The ecs.version in sample_event.json files was changed to 8.17.0. Previously sample_event.json files contained 8.11.0. [git-generate] go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/zeek

elasticmachine · 2025-02-04T21:18:01Z

💚 Build Succeeded

Buildkite Build
Commit: d15a551

History

💚 Build #21611 succeeded a36e2fc2f1ad7158e5cbd4c90114bbad286a4338
💚 Build #21489 succeeded fef5500785293effed9ca9e21ce1d4c87e404662

cc @taylor-swanson

elastic-sonarqube · 2025-02-04T21:18:05Z

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

elastic-vault-github-plugin-prod · 2025-02-04T21:36:16Z

Package qnap_nas - 1.21.0 containing this change is available at https://epr.elastic.co/package/qnap_nas/1.21.0/

elastic-vault-github-plugin-prod · 2025-02-04T21:36:17Z

Package snort - 1.16.0 containing this change is available at https://epr.elastic.co/package/snort/1.16.0/

elastic-vault-github-plugin-prod · 2025-02-04T21:36:18Z

Package sonicwall_firewall - 1.17.0 containing this change is available at https://epr.elastic.co/package/sonicwall_firewall/1.17.0/

elastic-vault-github-plugin-prod · 2025-02-04T21:36:18Z

Package sophos - 3.11.0 containing this change is available at https://epr.elastic.co/package/sophos/3.11.0/

elastic-vault-github-plugin-prod · 2025-02-04T21:36:19Z

Package squid - 1.1.0 containing this change is available at https://epr.elastic.co/package/squid/1.1.0/

elastic-vault-github-plugin-prod · 2025-02-04T21:36:20Z

Package stormshield - 1.1.0 containing this change is available at https://epr.elastic.co/package/stormshield/1.1.0/

elastic-vault-github-plugin-prod · 2025-02-04T21:36:21Z

Package suricata - 2.22.0 containing this change is available at https://epr.elastic.co/package/suricata/2.22.0/

elastic-vault-github-plugin-prod · 2025-02-04T21:36:21Z

Package tcp - 1.20.0 containing this change is available at https://epr.elastic.co/package/tcp/1.20.0/

elastic-vault-github-plugin-prod · 2025-02-04T21:36:22Z

Package udp - 2.1.0 containing this change is available at https://epr.elastic.co/package/udp/2.1.0/

elastic-vault-github-plugin-prod · 2025-02-04T21:36:23Z

Package watchguard_firebox - 1.1.0 containing this change is available at https://epr.elastic.co/package/watchguard_firebox/1.1.0/

elastic-vault-github-plugin-prod · 2025-02-04T21:36:24Z

Package zeek - 2.26.0 containing this change is available at https://epr.elastic.co/package/zeek/2.26.0/

taylor-swanson self-assigned this Feb 3, 2025

taylor-swanson changed the title ~~Update Deployment and Devices integrations to ECS 8.16.0 (part 4)~~ Update Deployment and Devices integrations to ECS 8.17.0 (part 4) Feb 3, 2025

taylor-swanson mentioned this pull request Jan 8, 2025

[meta] Upgrade integrations to ECS 8.17 #11952

Open

taylor-swanson marked this pull request as ready for review February 3, 2025 18:19

taylor-swanson requested a review from a team as a February 3, 2025 18:19

dwhyrock approved these changes Feb 3, 2025

View reviewed changes

qcorporation force-pushed the main branch from 410d8ec to 703eb18 Compare February 4, 2025 03:56

qcorporation requested review from a team as code owners February 4, 2025 03:56

qcorporation requested a review from faec February 4, 2025 03:56

taylor-swanson removed Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Integration:abnormal_security Abnormal AI labels Feb 4, 2025

qcorporation force-pushed the main branch from 7801e00 to ed31586 Compare February 4, 2025 18:34

taylor-swanson added 12 commits February 4, 2025 14:29

[udp] - change to ECS version git@v8.17.0

8b35ad9

ECS version in build manifest changed from git@v8.11.0 to git@v8.17.0. [git-generate] go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.17.0 -ecs-git-ref=git@v8.17.0 -pr=1 packages/udp

changelogs

d15a551

taylor-swanson merged commit 35c6e66 into elastic:main Feb 4, 2025

taylor-swanson deleted the ecs/8.17-part4 branch February 4, 2025 21:18

Conversation

taylor-swanson commented Feb 3, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Proposed commit message

Checklist

Related issues

Uh oh!

elasticmachine commented Feb 3, 2025

Uh oh!

dwhyrock Feb 3, 2025

Choose a reason for hiding this comment

Uh oh!

taylor-swanson Feb 4, 2025

Choose a reason for hiding this comment

Uh oh!

taylor-swanson Feb 4, 2025

Choose a reason for hiding this comment

Uh oh!

taylor-swanson Feb 4, 2025

Choose a reason for hiding this comment

Uh oh!

dwhyrock Feb 3, 2025

Choose a reason for hiding this comment

Uh oh!

elasticmachine commented Feb 4, 2025

💚 Build Succeeded

History

Uh oh!

elastic-sonarqube bot commented Feb 4, 2025

Quality Gate passed

Uh oh!

elastic-vault-github-plugin-prod bot commented Feb 4, 2025

Uh oh!

elastic-vault-github-plugin-prod bot commented Feb 4, 2025

Uh oh!

elastic-vault-github-plugin-prod bot commented Feb 4, 2025

Uh oh!

elastic-vault-github-plugin-prod bot commented Feb 4, 2025

Uh oh!

elastic-vault-github-plugin-prod bot commented Feb 4, 2025

Uh oh!

elastic-vault-github-plugin-prod bot commented Feb 4, 2025

Uh oh!

elastic-vault-github-plugin-prod bot commented Feb 4, 2025

Uh oh!

elastic-vault-github-plugin-prod bot commented Feb 4, 2025

Uh oh!

elastic-vault-github-plugin-prod bot commented Feb 4, 2025

Uh oh!

elastic-vault-github-plugin-prod bot commented Feb 4, 2025

Uh oh!

elastic-vault-github-plugin-prod bot commented Feb 4, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

taylor-swanson commented Feb 3, 2025 •

edited

Loading