[8.8] Update network filters. (#158353) (#158589)

# Backport

This will backport the following commits from `main` to `8.8`:
- [Update network filters.
(#158353)](https://github.com/elastic/kibana/pull/158353)

<!--- Backport version: 8.9.7 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Pete
Hampton","email":"pjhampton@users.noreply.github.com"},"sourceCommit":{"committedDate":"2023-05-26T16:35:58Z","message":"Update
network filters. (#158353)\n\n## Summary\r\n\r\nUpdates the prebuilt
rule alerts filterlist to allow through some\r\nadditional network
fields.","sha":"7c5b99f65bcb91077370845e4d525bf854f72d12","branchLabelMapping":{"^v8.9.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Feature:Telemetry","release_note:skip","Team:
SecuritySolution","v8.9.0","v8.8.1"],"number":158353,"url":"https://github.com/elastic/kibana/pull/158353","mergeCommit":{"message":"Update
network filters. (#158353)\n\n## Summary\r\n\r\nUpdates the prebuilt
rule alerts filterlist to allow through some\r\nadditional network
fields.","sha":"7c5b99f65bcb91077370845e4d525bf854f72d12"}},"sourceBranch":"main","suggestedTargetBranches":["8.8"],"targetPullRequestStates":[{"branch":"main","label":"v8.9.0","labelRegex":"^v8.9.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/158353","number":158353,"mergeCommit":{"message":"Update
network filters. (#158353)\n\n## Summary\r\n\r\nUpdates the prebuilt
rule alerts filterlist to allow through some\r\nadditional network
fields.","sha":"7c5b99f65bcb91077370845e4d525bf854f72d12"}},{"branch":"8.8","label":"v8.8.1","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Pete Hampton <pjhampton@users.noreply.github.com>
This commit is contained in:
Kibana Machine 2023-05-26 14:25:21 -04:00 committed by GitHub
parent 2b5725d558
commit 080c89ad61
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -92,9 +92,7 @@ export const prebuiltRuleAllowlistFields: AllowlistFields = {
hash: true,
},
},
destination: {
port: true,
},
destination: true,
dll: {
Ext: {
relative_file_creation_time: true,
@ -135,13 +133,7 @@ export const prebuiltRuleAllowlistFields: AllowlistFields = {
},
},
message: true,
network: {
bytes: true,
direction: true,
protocol: true,
transport: true,
type: true,
},
network: true,
orchestrator: {
namespace: true,
resource: {
@ -212,20 +204,14 @@ export const prebuiltRuleAllowlistFields: AllowlistFields = {
rule: {
name: true,
},
source: {
port: true,
},
source: true,
tls: {
server: {
hash: true,
},
},
type: true,
url: {
extension: true,
full: true,
path: true,
},
url: true,
user_agent: {
original: true,
},