mirror of
https://github.com/elastic/kibana.git
synced 2025-04-24 09:48:58 -04:00
Update network filters. (#158353)
## Summary Updates the prebuilt rule alerts filterlist to allow through some additional network fields.
This commit is contained in:
parent
7655cb9e9e
commit
7c5b99f65b
1 changed files with 4 additions and 18 deletions
|
@ -92,9 +92,7 @@ export const prebuiltRuleAllowlistFields: AllowlistFields = {
|
|||
hash: true,
|
||||
},
|
||||
},
|
||||
destination: {
|
||||
port: true,
|
||||
},
|
||||
destination: true,
|
||||
dll: {
|
||||
Ext: {
|
||||
relative_file_creation_time: true,
|
||||
|
@ -135,13 +133,7 @@ export const prebuiltRuleAllowlistFields: AllowlistFields = {
|
|||
},
|
||||
},
|
||||
message: true,
|
||||
network: {
|
||||
bytes: true,
|
||||
direction: true,
|
||||
protocol: true,
|
||||
transport: true,
|
||||
type: true,
|
||||
},
|
||||
network: true,
|
||||
orchestrator: {
|
||||
namespace: true,
|
||||
resource: {
|
||||
|
@ -212,20 +204,14 @@ export const prebuiltRuleAllowlistFields: AllowlistFields = {
|
|||
rule: {
|
||||
name: true,
|
||||
},
|
||||
source: {
|
||||
port: true,
|
||||
},
|
||||
source: true,
|
||||
tls: {
|
||||
server: {
|
||||
hash: true,
|
||||
},
|
||||
},
|
||||
type: true,
|
||||
url: {
|
||||
extension: true,
|
||||
full: true,
|
||||
path: true,
|
||||
},
|
||||
url: true,
|
||||
user_agent: {
|
||||
original: true,
|
||||
},
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue