Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[winlogbeat] Add event_data properties to the install template #13700

Closed
FrankHassanabad opened this issue Sep 16, 2019 · 0 comments · Fixed by #13704
Closed

[winlogbeat] Add event_data properties to the install template #13700

FrankHassanabad opened this issue Sep 16, 2019 · 0 comments · Fixed by #13704
Labels
enhancement Winlogbeat

Comments

@FrankHassanabad
Copy link

Describe the enhancement:
See:
elastic/kibana#45743

For the props and relevant information

Describe a specific use case for the enhancement or feature:
As a user of SIEM I might not have all the immediate data from event_data available to me before I flip on the job and that can cause errors starting the job. If the mappings are available ahead of time this would prevent the errors from showing when you flip on the job.

This will make these jobs operate like the others where you can start jobs before you have all the data pushed to your index.
@andrewkroh andrewkroh mentioned this issue Sep 16, 2019
Merged
andrewkroh added a commit to andrewkroh/beats that referenced this issue Sep 16, 2019
@andrewkroh
Add winlog.event_data.* parameters to index template
1f92f00 
Define fields used by machine-learning jobs in the index template installed by Winlogbeat.

Fixes elastic#13700
andrewkroh added a commit that referenced this issue Sep 17, 2019
@andrewkroh
Add winlog.event_data.* parameters to index template (#13704)
fdd9d25 
Define fields used by machine-learning jobs in the index template installed by Winlogbeat.

Fixes #13700
andrewkroh added a commit to andrewkroh/beats that referenced this issue Sep 17, 2019
@andrewkroh
Add winlog.event_data.* parameters to index template (elastic#13704)
89d9b4a 
Define fields used by machine-learning jobs in the index template installed by Winlogbeat.

Fixes elastic#13700

(cherry picked from commit fdd9d25)
@andrewkroh andrewkroh mentioned this issue Sep 17, 2019
Merged
andrewkroh added a commit that referenced this issue Sep 17, 2019
@andrewkroh
Add winlog.event_data.* parameters to index template (#13704) (#13710)
d055689 
Define fields used by machine-learning jobs in the index template installed by Winlogbeat.

Fixes #13700

(cherry picked from commit fdd9d25)
leweafan pushed a commit to leweafan/beats that referenced this issue Apr 28, 2023
@andrewkroh
Add winlog.event_data.* parameters to index template (elastic#13704) (e…
84f838f 
…lastic#13710)

Define fields used by machine-learning jobs in the index template installed by Winlogbeat.

Fixes elastic#13700

(cherry picked from commit e1d8988)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement Winlogbeat
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add winlog.event_data.* parameters to index template andrewkroh/beats
1 participant
@FrankHassanabad