m*: ensure event.kind is correctly set for pipeline errors#6661
m*: ensure event.kind is correctly set for pipeline errors#6661efd6 merged 1 commit intoelastic:mainfrom
Conversation
m365_defender, mattermost, microsoft_defender_endpoint, microsoft_dhcp, microsoft_exchange_online_message_trace, mysql_enterprise
🌐 Coverage report
|
|
Pinging @elastic/security-external-integrations (Team:Security-External Integrations) |
|
Package m365_defender - 1.11.0 containing this change is available at https://epr.elastic.co/search?package=m365_defender |
|
Package mattermost - 1.10.0 containing this change is available at https://epr.elastic.co/search?package=mattermost |
|
Package microsoft_defender_endpoint - 2.13.0 containing this change is available at https://epr.elastic.co/search?package=microsoft_defender_endpoint |
|
Package microsoft_dhcp - 1.14.0 containing this change is available at https://epr.elastic.co/search?package=microsoft_dhcp |
|
Package microsoft_exchange_online_message_trace - 1.5.0 containing this change is available at https://epr.elastic.co/search?package=microsoft_exchange_online_message_trace |
|
Package mysql_enterprise - 1.7.0 containing this change is available at https://epr.elastic.co/search?package=mysql_enterprise |
What does this PR do?
Modify m365_defender, mattermost, microsoft_defender_endpoint, microsoft_dhcp, microsoft_exchange_online_message_trace and mysql_enterprise to correctly set
event.kindfor pipeline errors and ensureerror.messageis an array.modsecurity is omitted as there is a pending PR to fix ingest in that package.
Checklist
changelog.ymlfile.Author's Checklist
How to test this PR locally
Related issues
Screenshots