Signed-off-by: Petar Dzepina <petar.dzepina@gmail.com>

Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>

Signed-off-by: Grant Haywood <grant@phaseshift.studio>

Signed-off-by: Petar Dzepina <petar.dzepina@gmail.com>

Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>

…in bucket level monitor (#262) (#279)

Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>
Co-authored-by: Surya Sashank Nistala <snistala@amazon.com>

…o return passed indexName in response (#283) (#284)

Signed-off-by: Petar Dzepina <petar.dzepina@gmail.com>

Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>

Signed-off-by: Petar Dzepina <petar.dzepina@gmail.com>

* Updated the MAINTAINERS doc.

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>

* Added CODEOWNERS List.

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>

---------

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>
(cherry picked from commit 41c4482)

…-to-2.x

[Backport 2.x] Baselined MAINTAINERS and CODEOWNERS docs.

Signed-off-by: Grant Haywood <grant@phaseshift.studio>
Co-authored-by: Subhobrata Dey <sbcd90@gmail.com>

Signed-off-by: Grant Haywood <grant@phaseshift.studio>
Co-authored-by: Subhobrata Dey <sbcd90@gmail.com>

Signed-off-by: Petar Dzepina <petar.dzepina@gmail.com>

Signed-off-by: Petar Dzepina <petar.dzepina@gmail.com>

Signed-off-by: Grant Haywood <grant@phaseshift.studio>

Signed-off-by: Grant Haywood <grant@phaseshift.studio>

Signed-off-by: Grant Haywood <grant@phaseshift.studio>

Signed-off-by: Ashish Agrawal <ashisagr@amazon.com>

Signed-off-by: Ashish Agrawal <ashisagr@amazon.com>

* Bumped version to 2.6.

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>

* Bumped version to 2.6.

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>

* Fixed release notes header.

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>

---------

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>

Signed-off-by: Petar Dzepina <petar.dzepina@gmail.com>

Signed-off-by: Petar Dzepina <petar.dzepina@gmail.com>

Signed-off-by: Petar Dzepina <petar.dzepina@gmail.com>
Co-authored-by: Petar Dzepina <petar.dzepina@gmail.com>

Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>

Signed-off-by: Ashish Agrawal <ashisagr@amazon.com>
(cherry picked from commit 03573e9)

Co-authored-by: Ashish Agrawal <ashish81394@gmail.com>

Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>

Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>

Signed-off-by: jowg-amazon <jowg@amazon.com>
(cherry picked from commit 3aa2844)

Co-authored-by: Joanne Wang <109310487+jowg-amazon@users.noreply.github.com>

Signed-off-by: Sandesh Kumar <sandeshkr419@gmail.com>

* Added 2.11 release notes.

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>

* Added 2.11 release notes.

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>

---------

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>
(cherry picked from commit 294785f)

Co-authored-by: AWSHurneyt <hurneyt@amazon.com>

* add mapping for indices storing threat intel feed data



* fix feed indices mapping



* add threat intel feed data dao



* add threatIntelEnabled field in detector.



* add threat intel feed service and searching feeds



* ti feed data to doc level query convertor logic added



* plug threat intel feed into detector creation



* Preliminary framework for jobscheduler and datasource (#626)



* create doc level query from threat intel feed data index docs"



* handle threat intel enabled check during detector updation



* add tests for testing threat intel feed integration with detectors



* Threat intel feeds job runner and unit tests (#654)

* fix doc level query constructor (#651)



* add mapping for indices storing threat intel feed data

* fix feed indices mapping

* add threat intel feed data dao



* add threatIntelEnabled field in detector.



* add threat intel feed service and searching feeds



* ti feed data to doc level query convertor logic added

* plug threat intel feed into detector creation



* Preliminary framework for jobscheduler and datasource (#626)



* with listener and processor



* removed actions



* clean up



* added parser



* add unit tests



* refactored class names



* before moving db



* after moving db



* added actions to plugin and removed user schedule



* unit tests



* fix build error



* changed transport naming



---------





* converge job scheduler code with threat intel feed integration in detectors



* converge job scheduler and detector threat intel code



* add feed metadata config files in src and test



* adds ioc fields list in log type config files and ioc fields object in LogType POJO



* fix compilation issues in tests



* test udpate detector disabling threat intel



* add tests for detector creation and updation with threat intel



* Threat intel test (#673)

* add mapping for indices storing threat intel feed data

* fix feed indices mapping

* add threat intel feed data dao



* add threatIntelEnabled field in detector.



* add threat intel feed service and searching feeds



* ti feed data to doc level query convertor logic added

* plug threat intel feed into detector creation



* Preliminary framework for jobscheduler and datasource (#626)



* create doc level query from threat intel feed data index docs"



* handle threat intel enabled check during detector updation

* add tests for testing threat intel feed integration with detectors



* Threat intel feeds job runner and unit tests (#654)

* fix doc level query constructor (#651)



* add mapping for indices storing threat intel feed data

* fix feed indices mapping

* add threat intel feed data dao



* add threatIntelEnabled field in detector.



* add threat intel feed service and searching feeds



* ti feed data to doc level query convertor logic added

* plug threat intel feed into detector creation



* Preliminary framework for jobscheduler and datasource (#626)



* with listener and processor



* removed actions



* clean up



* added parser



* add unit tests



* refactored class names



* before moving db



* after moving db



* added actions to plugin and removed user schedule



* unit tests



* fix build error



* changed transport naming



---------





* converge job scheduler code with threat intel feed integration in detectors



* refactored out unecessary



* added headers and cleaned up



* converge job scheduler and detector threat intel code



* working on testing



* fixed the parser and build.gradle



* add mapping for indices storing threat intel feed data

* fix feed indices mapping

* add threat intel feed data dao



* add threatIntelEnabled field in detector.



* add threat intel feed service and searching feeds



* ti feed data to doc level query convertor logic added

* plug threat intel feed into detector creation



* Preliminary framework for jobscheduler and datasource (#626)



* create doc level query from threat intel feed data index docs"



* handle threat intel enabled check during detector updation

* add tests for testing threat intel feed integration with detectors



* Threat intel feeds job runner and unit tests (#654)

* fix doc level query constructor (#651)



* add mapping for indices storing threat intel feed data

* fix feed indices mapping

* add threat intel feed data dao



* add threatIntelEnabled field in detector.



* add threat intel feed service and searching feeds



* ti feed data to doc level query convertor logic added

* plug threat intel feed into detector creation



* Preliminary framework for jobscheduler and datasource (#626)



* with listener and processor



* removed actions



* clean up



* added parser



* add unit tests



* refactored class names



* before moving db



* after moving db



* added actions to plugin and removed user schedule



* unit tests



* fix build error



* changed transport naming



---------





* converge job scheduler code with threat intel feed integration in detectors



* converge job scheduler and detector threat intel code



* add feed metadata config files in src and test



* clean up some tests



* fixed merge conflicts



* adds ioc fields list in log type config files and ioc fields object in LogType POJO

* update csv parser and new metadata field



* fixed job scheduler interval settings



* add tests for ioc to fields for each log type



* removed wildcards



---------







* fix threat intel integ tests and add update detector logic



* JS for Threat intel feeds - changed extension (#675)

* merge conflicts



* fixed java wildcards and changed update key name



* integ test failing



* fix job scheduler params



* changed extension and has debug messages



* clean up



* fixed job scheduler plugin spi jar resolution

* cleaned up TODOs and changed job scheduler name



---------




* TIF Job Runner Cleanup (#676)

* merge conflicts



* fixed java wildcards and changed update key name



* integ test failing



* fix job scheduler params



* changed extension and has debug messages



* clean up



* fixed job scheduler plugin spi jar resolution

* cleaned up TODOs and changed job scheduler name



* removed google commons unused import, updated interval setting, removed rest action



* removed policy file and updated name for job scheduler



* responded to comments about parameter validator and TIFMetadata



* refactored ThreatIntelFeedDataService and changed variables to public static final where possible



* changed opensearch-sap-threatintel to opensearch-sap-threat-intel



---------





* fix TIFJobParameter class



* test detector updation when feed updation job runs



* removed delete job scheduler code and cleaned up (#678)



* working integ test (#680)



* fix timeout of tif job creation



* remove unncessary thread forking in put tif job action



* refactoring code to address review comments



* detector trigger detection types


* pull out threat intel rest tests into separate test class



* add detection types testing in detector trigger for rules and threat intel detection scenarios



* add license header



* add threat intel field aliases in mapping view response



* fix threat intel feed parser



* fix workflow failing test



* spotless check failures fixed



* remove dockerfile (#689)



---------

Signed-off-by: Surya Sashank Nistala <snistala@amazon.com>
Signed-off-by: Joanne Wang <jowg@amazon.com>
Signed-off-by: Joanne Wang <109310487+jowg-amazon@users.noreply.github.com>
Co-authored-by: Surya Sashank Nistala <snistala@amazon.com>

* return rule fields which do not have aliases

Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>

* return rule fields which do not have aliases

Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>

---------

Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>
(cherry picked from commit 92a620d)

Co-authored-by: Subhobrata Dey <sbcd90@gmail.com>

* fix detector writeTo() method missing fields

Signed-off-by: Surya Sashank Nistala <snistala@amazon.com>

* fix test

Signed-off-by: Surya Sashank Nistala <snistala@amazon.com>

---------

Signed-off-by: Surya Sashank Nistala <snistala@amazon.com>
(cherry picked from commit 7a45203)

Co-authored-by: Surya Sashank Nistala <snistala@amazon.com>

Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>
(cherry picked from commit 0dd9787)

Co-authored-by: Subhobrata Dey <sbcd90@gmail.com>

Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: opensearch-ci-bot <opensearch-ci-bot@users.noreply.github.com>

…) (#707)

Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>

* Revert "make threat intel async (#703) (#704)"

This reverts commit 5b4ab6c.

Signed-off-by: Joanne Wang <jowg@amazon.com>

* Revert "Integrate threat intel feeds (#669) (#690)"

This reverts commit 559d97e.

Signed-off-by: Joanne Wang <jowg@amazon.com>

---------

Signed-off-by: Joanne Wang <jowg@amazon.com>

* added release notes for 2.11.1

Signed-off-by: Amardeepsingh Siglani <amardeep7194@gmail.com>

* updated release notes

Signed-off-by: Amardeepsingh Siglani <amardeep7194@gmail.com>

---------

Signed-off-by: Amardeepsingh Siglani <amardeep7194@gmail.com>
(cherry picked from commit 177e831)

Co-authored-by: Amardeepsingh Siglani <amardeep7194@gmail.com>

This reverts commit 282046d.

Signed-off-by: Surya Sashank Nistala <snistala@amazon.com>

* update release notes for 2.11.1

Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>

* Update opensearch-security-analytics.release-notes-2.11.1.0.md

---------

Signed-off-by: Subhobrata Dey <sbcd90@gmail.com>
(cherry picked from commit 9b36b35)

Co-authored-by: Subhobrata Dey <sbcd90@gmail.com>

Signed-off-by: Surya Sashank Nistala <snistala@amazon.com>

* remove wildcard



* changed wildcardtest



* fixed wildcards



* fixed wildcard query test



* fixed correlation engine tests



* fixed query backend tests



* clean up



* added two integration tests



---------

Signed-off-by: Joanne Wang <jowg@amazon.com>

Signed-off-by: GitHub <noreply@github.com>