Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security entity store host os fields #197326

Conversation

jaredburgettelastic
Copy link
Contributor

@jaredburgettelastic jaredburgettelastic commented Oct 22, 2024

Summary

Adds the host.os.name and host.os.type ECS fields to Security's entity store definition. These fields, much like other host.* fields, are collected up to a maximum number of 10 distinct values.

@jaredburgettelastic jaredburgettelastic added the Team:Entity Analytics Security Entity Analytics Team label Oct 22, 2024
@jaredburgettelastic jaredburgettelastic requested a review from a team as a code owner October 22, 2024 19:01
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-entity-analytics (Team:Entity Analytics)

@jaredburgettelastic jaredburgettelastic added backport:version Backport to applied version labels v9.0.0 v8.16.0 v8.17.0 release_note:skip Skip the PR/issue when compiling release notes labels Oct 22, 2024
Copy link
Member

@machadoum machadoum left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👏

@jaredburgettelastic
Copy link
Contributor Author

@elasticmachine merge upstream

@elasticmachine
Copy link
Contributor

💛 Build succeeded, but was flaky

Failed CI Steps

Metrics [docs]

✅ unchanged

History

@jaredburgettelastic jaredburgettelastic merged commit a1a5db9 into elastic:main Oct 24, 2024
46 checks passed
@kibanamachine
Copy link
Contributor

Starting backport for target branches: 8.16, 8.x

https://github.com/elastic/kibana/actions/runs/11500905572

kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Oct 24, 2024
## Summary

Adds the `host.os.name` and `host.os.type` ECS fields to Security's
entity store definition. These fields, much like other `host.*` fields,
are collected up to a maximum number of 10 distinct values.

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
(cherry picked from commit a1a5db9)
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Oct 24, 2024
## Summary

Adds the `host.os.name` and `host.os.type` ECS fields to Security's
entity store definition. These fields, much like other `host.*` fields,
are collected up to a maximum number of 10 distinct values.

---------

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
(cherry picked from commit a1a5db9)
@kibanamachine
Copy link
Contributor

💚 All backports created successfully

Status Branch Result
8.16
8.x

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation

kibanamachine added a commit that referenced this pull request Oct 24, 2024
# Backport

This will backport the following commits from `main` to `8.16`:
- [Security entity store host os fields
(#197326)](#197326)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Jared
Burgett","email":"147995946+jaredburgettelastic@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-10-24T14:01:04Z","message":"Security
entity store host os fields (#197326)\n\n## Summary\r\n\r\nAdds the
`host.os.name` and `host.os.type` ECS fields to Security's\r\nentity
store definition. These fields, much like other `host.*` fields,\r\nare
collected up to a maximum number of 10 distinct
values.\r\n\r\n---------\r\n\r\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"a1a5db933bbd7b9d3a5da4ead05fae97dad392f4","branchLabelMapping":{"^v9.0.0$":"main","^v8.17.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Entity
Analytics","v8.16.0","backport:version","v8.17.0"],"title":"Security
entity store host os
fields","number":197326,"url":"https://github.com/elastic/kibana/pull/197326","mergeCommit":{"message":"Security
entity store host os fields (#197326)\n\n## Summary\r\n\r\nAdds the
`host.os.name` and `host.os.type` ECS fields to Security's\r\nentity
store definition. These fields, much like other `host.*` fields,\r\nare
collected up to a maximum number of 10 distinct
values.\r\n\r\n---------\r\n\r\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"a1a5db933bbd7b9d3a5da4ead05fae97dad392f4"}},"sourceBranch":"main","suggestedTargetBranches":["8.16","8.x"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/197326","number":197326,"mergeCommit":{"message":"Security
entity store host os fields (#197326)\n\n## Summary\r\n\r\nAdds the
`host.os.name` and `host.os.type` ECS fields to Security's\r\nentity
store definition. These fields, much like other `host.*` fields,\r\nare
collected up to a maximum number of 10 distinct
values.\r\n\r\n---------\r\n\r\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"a1a5db933bbd7b9d3a5da4ead05fae97dad392f4"}},{"branch":"8.16","label":"v8.16.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.17.0","branchLabelMappingKey":"^v8.17.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Jared Burgett <147995946+jaredburgettelastic@users.noreply.github.com>
kibanamachine added a commit that referenced this pull request Oct 24, 2024
# Backport

This will backport the following commits from `main` to `8.x`:
- [Security entity store host os fields
(#197326)](#197326)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Jared
Burgett","email":"147995946+jaredburgettelastic@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-10-24T14:01:04Z","message":"Security
entity store host os fields (#197326)\n\n## Summary\r\n\r\nAdds the
`host.os.name` and `host.os.type` ECS fields to Security's\r\nentity
store definition. These fields, much like other `host.*` fields,\r\nare
collected up to a maximum number of 10 distinct
values.\r\n\r\n---------\r\n\r\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"a1a5db933bbd7b9d3a5da4ead05fae97dad392f4","branchLabelMapping":{"^v9.0.0$":"main","^v8.17.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Entity
Analytics","v8.16.0","backport:version","v8.17.0"],"title":"Security
entity store host os
fields","number":197326,"url":"https://github.com/elastic/kibana/pull/197326","mergeCommit":{"message":"Security
entity store host os fields (#197326)\n\n## Summary\r\n\r\nAdds the
`host.os.name` and `host.os.type` ECS fields to Security's\r\nentity
store definition. These fields, much like other `host.*` fields,\r\nare
collected up to a maximum number of 10 distinct
values.\r\n\r\n---------\r\n\r\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"a1a5db933bbd7b9d3a5da4ead05fae97dad392f4"}},"sourceBranch":"main","suggestedTargetBranches":["8.16","8.x"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/197326","number":197326,"mergeCommit":{"message":"Security
entity store host os fields (#197326)\n\n## Summary\r\n\r\nAdds the
`host.os.name` and `host.os.type` ECS fields to Security's\r\nentity
store definition. These fields, much like other `host.*` fields,\r\nare
collected up to a maximum number of 10 distinct
values.\r\n\r\n---------\r\n\r\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"a1a5db933bbd7b9d3a5da4ead05fae97dad392f4"}},{"branch":"8.16","label":"v8.16.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.17.0","branchLabelMappingKey":"^v8.17.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Jared Burgett <147995946+jaredburgettelastic@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport:version Backport to applied version labels release_note:skip Skip the PR/issue when compiling release notes Team:Entity Analytics Security Entity Analytics Team v8.16.0 v8.17.0 v9.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants