github-mirrors/kibana
1
0
Fork 0
mirror of https://github.com/elastic/kibana.git synced 2025-04-24 09:48:58 -04:00
Code Issues Projects Releases Packages Wiki Activity

[8.x] Security entity store host os fields (#197326) (#197655)

Browse source 
# Backport

This will backport the following commits from `main` to `8.x`:
- [Security entity store host os fields
(#197326)](https://github.com/elastic/kibana/pull/197326)

<!--- Backport version: 9.4.3 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Jared
Burgett","email":"147995946+jaredburgettelastic@users.noreply.github.com"},"sourceCommit":{"committedDate":"2024-10-24T14:01:04Z","message":"Security
entity store host os fields (#197326)\n\n## Summary\r\n\r\nAdds the
`host.os.name` and `host.os.type` ECS fields to Security's\r\nentity
store definition. These fields, much like other `host.*` fields,\r\nare
collected up to a maximum number of 10 distinct
values.\r\n\r\n---------\r\n\r\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"a1a5db933bbd7b9d3a5da4ead05fae97dad392f4","branchLabelMapping":{"^v9.0.0$":"main","^v8.17.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","v9.0.0","Team:Entity
Analytics","v8.16.0","backport:version","v8.17.0"],"title":"Security
entity store host os
fields","number":197326,"url":"https://github.com/elastic/kibana/pull/197326","mergeCommit":{"message":"Security
entity store host os fields (#197326)\n\n## Summary\r\n\r\nAdds the
`host.os.name` and `host.os.type` ECS fields to Security's\r\nentity
store definition. These fields, much like other `host.*` fields,\r\nare
collected up to a maximum number of 10 distinct
values.\r\n\r\n---------\r\n\r\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"a1a5db933bbd7b9d3a5da4ead05fae97dad392f4"}},"sourceBranch":"main","suggestedTargetBranches":["8.16","8.x"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/197326","number":197326,"mergeCommit":{"message":"Security
entity store host os fields (#197326)\n\n## Summary\r\n\r\nAdds the
`host.os.name` and `host.os.type` ECS fields to Security's\r\nentity
store definition. These fields, much like other `host.*` fields,\r\nare
collected up to a maximum number of 10 distinct
values.\r\n\r\n---------\r\n\r\nCo-authored-by: Elastic Machine
<elasticmachine@users.noreply.github.com>","sha":"a1a5db933bbd7b9d3a5da4ead05fae97dad392f4"}},{"branch":"8.16","label":"v8.16.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.x","label":"v8.17.0","branchLabelMappingKey":"^v8.17.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Jared Burgett <147995946+jaredburgettelastic@users.noreply.github.com>
This commit is contained in:
Kibana Machine 2024-10-25 02:44:57 +11:00 • committed by GitHub
parent 8e5c5fa72b
commit cf3c3e6c7d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 34 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
x-pack/plugins/security_solution/server/lib/entity_analytics/entity_store/united_entity_definitions/entity_types/host.ts
View file

@ -18,6 +18,8 @@ export const getHostUnitedDefinition: UnitedDefinitionBuilder = (fieldHistoryLen
collect({ field: 'host.domain' }),
collect({ field: 'host.hostname' }),
collect({ field: 'host.id' }),
collect({ field: 'host.os.name' }),
collect({ field: 'host.os.type' }),
collect({
field: 'host.ip',
mapping: {

32
x-pack/plugins/security_solution/server/lib/entity_analytics/entity_store/united_entity_definitions/get_united_definition.test.ts
View file

@ -59,6 +59,12 @@ describe('getUnitedEntityDefinition', () => {
"host.name": Object {
"type": "keyword",
},
"host.os.name": Object {
"type": "keyword",
},
"host.os.type": Object {
"type": "keyword",
},
"host.risk.calculated_level": Object {
"type": "keyword",
},
@ -95,6 +101,16 @@ describe('getUnitedEntityDefinition', () => {
"maxLength": 10,
"operation": "collect_values",
},
Object {
"field": "host.os.name",
"maxLength": 10,
"operation": "collect_values",
},
Object {
"field": "host.os.type",
"maxLength": 10,
"operation": "collect_values",
},
Object {
"field": "host.ip",
"maxLength": 10,
@ -184,6 +200,22 @@ describe('getUnitedEntityDefinition', () => {
"destination": "host.id",
"source": "host.id",
},
Object {
"aggregation": Object {
"limit": 10,
"type": "terms",
},
"destination": "host.os.name",
"source": "host.os.name",
},
Object {
"aggregation": Object {
"limit": 10,
"type": "terms",
},
"destination": "host.os.type",
"source": "host.os.type",
},
Object {
"aggregation": Object {
"limit": 10,