Add Fortigate Fortinet index to multiple detection rules #4275
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Pull Request
Issue link(s):
Resolves #4268
Summary - What I changed
Did a bit of a dive into the mentioned rules and how they map to the fortinet fortigate integration
index
should be updated to include the integrationindex
should be updated to include the integrationindex
should be updated to include the integrationindex
should be updated to include the integrationevent.action
will match with the fortinet logsindex
should be updated to include the integrationtype
field exported by fortinetindex
should be updated to include the integrationindex
should be updated to include the integrationindex
should be updated to include the integrationevent.action
will match with the fortinet logsindex
should be updated to include the integrationindex
should be updated to include the integrationHow To Test
Checklist
bug
,enhancement
,schema
,maintenance
,Rule: New
,Rule: Deprecation
,Rule: Tuning
,Hunt: New
, orHunt: Tuning
so guidelines can be generated- [ ] Added themeta:rapid-merge
label if planning to merge within 24 hours- [ ] Automated testing was updated or added to match the most common scenarios- [ ] Documentation and comments were added for features that require explanationContributor checklist