Skip to content

Create new "Add Data" tutorials for Filebeat modules#77237

Merged
andrewkroh merged 3 commits intoelastic:masterfrom
andrewkroh:feature/update-add-data
Oct 6, 2020
Merged

Create new "Add Data" tutorials for Filebeat modules#77237
andrewkroh merged 3 commits intoelastic:masterfrom
andrewkroh:feature/update-add-data

Conversation

@andrewkroh
Copy link
Copy Markdown
Member

@andrewkroh andrewkroh commented Sep 10, 2020

Summary

This creates new Add Data tutorials for Filebeat modules.

Added

  • auditd
  • barracuda
  • bluecoat
  • cef
  • checkpoint
  • crowdstrike
  • cylance
  • f5
  • fortinet
  • googlecloud
  • gsuite
  • haproxy
  • icinga
  • imperva
  • infoblox
  • juniper
  • kibana
  • microsoft
  • misp
  • mongodb
  • mssql
  • netscout
  • o365
  • okta
  • panw
  • rabbitmq
  • radware
  • santa
  • sonicwall
  • sophos
  • squid
  • tomcat
  • zscaler

Replaced

  • Logstash Netflow with Filebeat Netflow

Release Note

Created "add data" tutorials for several newly added Filebeat modules.

Checklist

For maintainers

Screenshots

Before

add_data_7 9

After

add_data_after

@andrewkroh andrewkroh force-pushed the feature/update-add-data branch from cc4505a to 1e39e01 Compare September 10, 2020 22:58
@andrewkroh andrewkroh marked this pull request as ready for review September 14, 2020 16:55
This creates new Add Data tutorials for Filebeat modules.
@elasticmachine
Copy link
Copy Markdown
Contributor

Pinging @elastic/siem (Team:SIEM)

@andrewkroh
Copy link
Copy Markdown
Member Author

@elasticmachine merge upstream

@andrewkroh
Copy link
Copy Markdown
Member Author

@elasticmachine merge upstream

@andrewkroh
Copy link
Copy Markdown
Member Author

I will follow up on this PR to add some better instructions for using the Winlogbeat modules.

{
id: 'a555b160-4987-11e9-b8ce-ed898b5ef295',
linkLabel: i18n.translate('home.tutorials.ciscoLogs.artifacts.dashboards.linkLabel', {
defaultMessage: 'ASA Firewall Dashboard',
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems it refers not only to ASA (https://github.com/elastic/kibana/pull/77237/files#diff-11a1d7b8a383edfaa70f21c8c0a2eb71R47). Not sure if is worth changing this also

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good observation. Each tutorial has space for a single dashboard or Kibana app link. So I had to choose to which one to include. The text refers to the other parts of the module. I should probably create separate tutorials for each dataset like we are going to do for the packages. I added a TODO for this to the issue for this task. WDYT about merging as is and do a follow up?

@andrewkroh
Copy link
Copy Markdown
Member Author

@elasticmachine merge upstream

@kibanamachine
Copy link
Copy Markdown
Contributor

💚 Build Succeeded

Metrics [docs]

distributable file count

id before after diff
default 47107 47136 +29
oss 28597 28626 +29

History

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

@andrewkroh andrewkroh merged commit 1c729e8 into elastic:master Oct 6, 2020
andrewkroh added a commit to andrewkroh/kibana that referenced this pull request Oct 7, 2020
This creates new Add Data tutorials for Filebeat modules.

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
# Conflicts:
#	src/plugins/home/public/assets/logos/oracle.svg
andrewkroh added a commit to andrewkroh/kibana that referenced this pull request Oct 7, 2020
This creates new Add Data tutorials for Filebeat modules.

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
# Conflicts:
#	src/plugins/home/public/assets/logos/oracle.svg
andrewkroh added a commit that referenced this pull request Oct 7, 2020
This creates new Add Data tutorials for Filebeat modules.

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
# Conflicts:
#	src/plugins/home/public/assets/logos/oracle.svg
andrewkroh added a commit that referenced this pull request Oct 7, 2020
This creates new Add Data tutorials for Filebeat modules.

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
# Conflicts:
#	src/plugins/home/public/assets/logos/oracle.svg
gmmorris added a commit that referenced this pull request Oct 8, 2020
…into feature/task_manager_429

* 'feature/task_manager_429' of github.com:elastic/kibana: (158 commits)
  Add license check to direct package upload handler. (#79653)
  [Ingest Manager] Rename API /api/ingest_manager => /api/fleet (#79193)
  [Security Solution][Resolver] Simplify CopyableField styling and add comments (#79594)
  Fine-tunes ML related text on Metrics UI (#79425)
  [ML] DF Analytics creation wizard: ensure job creation possible when model memory lower than estimate (#79229)
  Add new "Add Data" tutorials (#77237)
  Update APM telemetry docs (#79583)
  Revert "Add support for runtime field types to mappings editor. (#77420)" (#79611)
  Kibana request headers (#79218)
  ensure missing indexPattern error is bubbled up to error callout (#79378)
  Missing space fix (#79585)
  remove duplicate tab states (#79501)
  [data.ui] Lazy load UI components in data plugin. (#78889)
  Add generic type params to search dependency. (#79608)
  [Ingest Manager] Internal action for policy reassign (#78493)
  [ILM] Add index_codec to forcemerge action in hot and warm phases (#78175)
  [Ingest Manager] Update open API spec and add condition to agent upgrade endpoint (#79579)
  [ML] Hide Data Grid column options when histogram charts are enabled. (#79459)
  [Telemetry] Synchronous `setup` and `start` methods (#79457)
  [Observability] Persist time range across apps (#79258)
  ...
@MindyRS MindyRS added the Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. label Sep 23, 2021
@elasticmachine
Copy link
Copy Markdown
Contributor

Pinging @elastic/security-solution (Team: SecuritySolution)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Feature:Add Data Add Data and sample data feature on Home release_note:enhancement review Team: SecuritySolution Security Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc. Team:SIEM v7.10.0 v8.0.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants