-
Notifications
You must be signed in to change notification settings - Fork 497
[mimecast] Add use cases, docs, and update sample events #2690
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[mimecast] Add use cases, docs, and update sample events #2690
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nice additions! Just as a note aside of the comments, I think the changes done in README.md need to be done instead to the _dev/build/...
README file.
packages/mimecast/data_stream/audit_events/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
packages/mimecast/data_stream/audit_events/elasticsearch/ingest_pipeline/default.yml
Show resolved
Hide resolved
...ges/mimecast/data_stream/audit_events/_dev/test/pipeline/test-audit-events.log-expected.json
Outdated
Show resolved
Hide resolved
packages/mimecast/data_stream/audit_events/elasticsearch/ingest_pipeline/default.yml
Show resolved
Hide resolved
packages/mimecast/data_stream/audit_events/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
packages/mimecast/data_stream/audit_events/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
...ges/mimecast/data_stream/audit_events/_dev/test/pipeline/test-audit-events.log-expected.json
Show resolved
Hide resolved
…ns in pipeline operators
packages/mimecast/data_stream/audit_events/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
packages/mimecast/data_stream/audit_events/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
packages/mimecast/data_stream/audit_events/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
packages/mimecast/data_stream/audit_events/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
/test |
I'm not sure if you want to do this here, but the the ECS version used in the package should be changed from 1.12.0 to 8.0.0. It's in the ingest pipeline and this file. |
Pinging @elastic/security-external-integrations (Team:Security-External Integrations) |
/test |
/test |
/test |
/test |
/test |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM. I only reviewed the generation of the Readme + the 8.0 ecs changes and generation of test data.
What does this PR do?
Add use cases for audit events and update sample events and docs.
Checklist
changelog.yml
file.Author's Checklist
How to test this PR locally
Related issues
Screenshots