github-mirrors/kibana
1
0
Fork 0
mirror of https://github.com/elastic/kibana.git synced 2025-04-24 01:38:56 -04:00
Code Issues Projects Releases Packages Wiki Activity

[8.11] Add Defend advanced option to exclude local connections from network events (#164235) (#168253)

Browse source 
# Backport

This will backport the following commits from `main` to `8.11`:
- [Add Defend advanced option to exclude local connections from network
events (#164235)](https://github.com/elastic/kibana/pull/164235)

<!--- Backport version: 8.9.7 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Michal
Stanek","email":"75310947+stanek-michal@users.noreply.github.com"},"sourceCommit":{"committedDate":"2023-10-06T15:33:13Z","message":"Add
Defend advanced option to exclude local connections from network events
(#164235)\n\n## Summary\r\n\r\nAdd the following advanced policy option
for Elastic Endpoint/Elastic\r\nDefend for all three OS (Linux, Mac,
Windows):\r\n\r\n`network_events_exclude_local`\r\n\r\nwith
description:\r\n`Exclude local connections from network events. Default:
false`\r\n\r\n### Checklist\r\n\r\nDelete any items that are not
applicable to this PR.\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"14eaf25475614a6088f60cda5d9b9b5fa48357cb","branchLabelMapping":{"^v8.12.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Defend
Workflows","v8.11.0","v8.12.0"],"number":164235,"url":"https://github.com/elastic/kibana/pull/164235","mergeCommit":{"message":"Add
Defend advanced option to exclude local connections from network events
(#164235)\n\n## Summary\r\n\r\nAdd the following advanced policy option
for Elastic Endpoint/Elastic\r\nDefend for all three OS (Linux, Mac,
Windows):\r\n\r\n`network_events_exclude_local`\r\n\r\nwith
description:\r\n`Exclude local connections from network events. Default:
false`\r\n\r\n### Checklist\r\n\r\nDelete any items that are not
applicable to this PR.\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"14eaf25475614a6088f60cda5d9b9b5fa48357cb"}},"sourceBranch":"main","suggestedTargetBranches":["8.11"],"targetPullRequestStates":[{"branch":"8.11","label":"v8.11.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.12.0","labelRegex":"^v8.12.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/164235","number":164235,"mergeCommit":{"message":"Add
Defend advanced option to exclude local connections from network events
(#164235)\n\n## Summary\r\n\r\nAdd the following advanced policy option
for Elastic Endpoint/Elastic\r\nDefend for all three OS (Linux, Mac,
Windows):\r\n\r\n`network_events_exclude_local`\r\n\r\nwith
description:\r\n`Exclude local connections from network events. Default:
false`\r\n\r\n### Checklist\r\n\r\nDelete any items that are not
applicable to this PR.\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<42973632+kibanamachine@users.noreply.github.com>","sha":"14eaf25475614a6088f60cda5d9b9b5fa48357cb"}}]}]
BACKPORT-->

Co-authored-by: Michal Stanek <75310947+stanek-michal@users.noreply.github.com>
This commit is contained in:
Kibana Machine 2023-10-06 13:39:17 -04:00 • committed by GitHub
parent af03cbf8a7
commit d0469b92c6
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 30 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

30
x-pack/plugins/security_solution/public/management/pages/policy/models/advanced_policy_schema.ts
View file

@ -189,6 +189,26 @@ export const AdvancedPolicySchema: AdvancedPolicySchemaType[] = [
}
),
},
{
key: 'linux.advanced.network_events_exclude_local',
first_supported_version: '8.10.1',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.linux.advanced.network_events_exclude_local',
{
defaultMessage: 'Exclude local connections from network events. Default: false.',
}
),
},
{
key: 'mac.advanced.network_events_exclude_local',
first_supported_version: '8.10.1',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.mac.advanced.network_events_exclude_local',
{
defaultMessage: 'Exclude local connections from network events. Default: false.',
}
),
},
{
key: 'mac.advanced.agent.connection_delay',
first_supported_version: '7.9',
@ -392,6 +412,16 @@ export const AdvancedPolicySchema: AdvancedPolicySchemaType[] = [
}
),
},
{
key: 'windows.advanced.network_events_exclude_local',
first_supported_version: '8.10.1',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.network_events_exclude_local',
{
defaultMessage: 'Exclude local connections from network events. Default: false.',
}
),
},
{
key: 'windows.advanced.agent.connection_delay',
first_supported_version: '7.9',