Skip to content

[google_workspace] Sync google_workspace data streams with beats#690

Merged
marc-gr merged 1 commit intoelastic:masterfrom
marc-gr:google_workspace-ecs-1.8
Feb 17, 2021
Merged

[google_workspace] Sync google_workspace data streams with beats#690
marc-gr merged 1 commit intoelastic:masterfrom
marc-gr:google_workspace-ecs-1.8

Conversation

@marc-gr
Copy link
Copy Markdown
Contributor

@marc-gr marc-gr commented Feb 16, 2021

What does this PR do?

Syncs google_workspace package with changes done in beats

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.

@elasticmachine
Copy link
Copy Markdown

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

@elasticmachine
Copy link
Copy Markdown

elasticmachine commented Feb 16, 2021

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS
Pipeline View Test View Changes Artifacts preview

Expand to view the summary

Build stats

  • Build Cause: Branch indexing

  • Start Time: 2021-02-16T22:28:05.530+0000

  • Duration: 30 min 47 sec

  • Commit: 7150937

Test stats 🧪

Test Results
Failed 0
Passed 73
Skipped 0
Total 73

Trends 🧪

Image of Build Times

Image of Tests

Copy link
Copy Markdown
Member

@P1llus P1llus left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, added some small comments, but since its not directly ECS related then maybe we should do it separately, rest is good :)

Comment on lines +144 to +145
evt.Put("event.category", ["iam"]);
evt.Put("event.type", ["group"]);
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We might want to use append instead of put on these, as they are array fields. I see that its appended later on, but will this always happen?

Comment on lines +144 to +145
evt.Put("event.type", ["start"]);
evt.Put("event.category", ["authentication", "session"]);
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Another append case

@marc-gr marc-gr merged commit 8243545 into elastic:master Feb 17, 2021
@marc-gr marc-gr deleted the google_workspace-ecs-1.8 branch February 17, 2021 09:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants