-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Cherry-pick #21160 to 7.x: [ECS] Adds related.hosts to capture all hostnames and host identifiers on an event. #21257
Conversation
Pinging @elastic/siem (Team:SIEM) |
b47e02c
to
f1817aa
Compare
💔 Tests FailedExpand to view the summary
Build stats
Test stats 🧪
Test errorsExpand to view the tests failures
Steps errorsExpand to view the steps failures
Log outputExpand to view the last 100 lines of log output
|
52f39bb
to
961956a
Compare
…rs on an event. (elastic#21160) * Add related.hosts to panos * Add related.hosts to osquery * Add related.hosts to system * Add related.hosts to defender atp * Add related.hosts to cisco * Add related.hosts to suricata * Use allow_duplicates: false to remove duplicate hosts * Add related.hosts to rsa2elk modules * Add changelog entry * Add checks to avoid empty strings (cherry picked from commit 3fb01e3)
961956a
to
f89371b
Compare
Cherry-pick of PR #21160 to 7.x branch. Original message:
What does this PR do?
Added related.hosts to capture all hostnames and host identifiers on an event.
Why is it important?
To keep the modules up to date with ecs 1.6
Checklist
- [ ] My code follows the style guidelines of this project- [ ] I have commented my code, particularly in hard-to-understand areas- [ ] I have made corresponding changes to the documentationCHANGELOG.next.asciidoc
orCHANGELOG-developer.next.asciidoc
.Author's Checklist
Related issues