[windows] Add filters to visuals for only AppLocker data to be displayed#8993
[windows] Add filters to visuals for only AppLocker data to be displayed#8993marc-gr merged 7 commits intoelastic:mainfrom nicpenning:dashboard-filter-fix
Conversation
|
This is ready to test. |
|
Pinging @elastic/elastic-agent (Team:Elastic-Agent) |
|
/test |
|
I think |
|
Okay - So I need to run that command and then push the changes up? |
|
elastic-package check has been applied and committed. Please test again! |
|
/test |
|
I cannot see the build issues now that it's been moved to buildkite. Any chance this can be opened up to community members contributing? |
|
Any updates on why this failed? I am kinda blind over here. |
|
I see a failure of: I'll see if we can get someone to comment about plans for access. In the meantime please feel free to ping me with @strawgate and I'll grab the logs |
|
Thank you. Any idea how that issue can be resolved? |
|
/test |
|
Is this issue sourced from using 8.12.0 when I checked the package? @strawgate - is it still the same error? |
Could be, I checked and for 8.12 it passes alright, but CI uses the minimum supported version which is 8.8.0. If you used 8.12 to do the changes that might be the issue. I'd suggest doing them with an 8.8.0 stack ( |
|
Bummer - Okay, I can do that. Perhaps it is a deeper issue, but it is concerning we must use such an older version of the stack. In an example of a visualization that only exists in the latest, this would likely then be a blocker and not something we can add until the elastic-package tool can keep up? I can reference this issue there if that will help with this side issue. Please let me know! -Update - Nevermind, I misread your response. This is a CI limitation not an elastic-package one. Disregard! :) |
packages/windows/data_stream/forwarded/_dev/test/pipeline/test-security-4662.json
Show resolved
Hide resolved
|
I'll take care of fixing this one since not having access to CI complicates things for @nicpenning . Thanks for the work done @nicpenning will update this PR with the fix. 👍 |
|
👋 |
|
/test |
🚀 Benchmarks reportTo see the full report comment with |
💚 Build Succeeded
History
|
|
|
🎉 |
|
Package windows - 1.44.3 containing this change is available at https://epr.elastic.co/search?package=windows |


0.0% Duplication on New Code
This fixes the visuals in the dashboard for AppLocker so only relevant data is displayed. See: #8969
Checklist
I have reviewed tips for building integrations and this pull request is aligned with them.
I have verified that all data streams collect metrics or logs.
I have added an entry to my package's
changelog.ymlfile.I have verified that Kibana version constraints are current according to guidelines.
Closes Dashboard issues with "[Windows AppLocker] Audited and Blocked Applications" dashboard as provided by "Windows" integration 1.44.1 #8969