Generate kbn/ecs with ECS 8.6.1 (#151642)

## Summary

This PR updates kbn/ecs to defintions generated with ECS 8.6.1

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
This commit is contained in:
Luke G 2023-02-21 15:02:38 +01:00 committed by GitHub
parent 11dc789537
commit d92d691946
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
6 changed files with 67 additions and 50 deletions

View file

@ -16,7 +16,7 @@ exports[`asLoggerFactory() only allows to create new loggers. 1`] = `
Object { Object {
"@timestamp": "2012-01-30T22:33:22.011-05:00", "@timestamp": "2012-01-30T22:33:22.011-05:00",
"ecs": Object { "ecs": Object {
"version": "8.6.0", "version": "8.6.1",
}, },
"log": Object { "log": Object {
"level": "TRACE", "level": "TRACE",
@ -33,7 +33,7 @@ exports[`asLoggerFactory() only allows to create new loggers. 2`] = `
Object { Object {
"@timestamp": "2012-01-30T17:33:22.011-05:00", "@timestamp": "2012-01-30T17:33:22.011-05:00",
"ecs": Object { "ecs": Object {
"version": "8.6.0", "version": "8.6.1",
}, },
"log": Object { "log": Object {
"level": "INFO", "level": "INFO",
@ -51,7 +51,7 @@ exports[`asLoggerFactory() only allows to create new loggers. 3`] = `
Object { Object {
"@timestamp": "2012-01-30T12:33:22.011-05:00", "@timestamp": "2012-01-30T12:33:22.011-05:00",
"ecs": Object { "ecs": Object {
"version": "8.6.0", "version": "8.6.1",
}, },
"log": Object { "log": Object {
"level": "FATAL", "level": "FATAL",
@ -68,7 +68,7 @@ exports[`flushes memory buffer logger and switches to real logger once config is
Object { Object {
"@timestamp": "2012-02-01T09:33:22.011-05:00", "@timestamp": "2012-02-01T09:33:22.011-05:00",
"ecs": Object { "ecs": Object {
"version": "8.6.0", "version": "8.6.1",
}, },
"log": Object { "log": Object {
"level": "INFO", "level": "INFO",
@ -86,7 +86,7 @@ exports[`flushes memory buffer logger and switches to real logger once config is
Object { Object {
"@timestamp": "2012-01-31T23:33:22.011-05:00", "@timestamp": "2012-01-31T23:33:22.011-05:00",
"ecs": Object { "ecs": Object {
"version": "8.6.0", "version": "8.6.1",
}, },
"log": Object { "log": Object {
"level": "INFO", "level": "INFO",

View file

@ -14,5 +14,5 @@ export interface EcsEcs {
* ECS version this event conforms to. `ecs.version` is a required field and must exist in all events. * ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
* When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events. * When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.
*/ */
version: '8.6.0'; version: '8.6.1';
} }

View file

@ -13765,14 +13765,27 @@ export const EcsFlat = {
short: 'Date/time indicator was last reported.', short: 'Date/time indicator was last reported.',
type: 'date', type: 'date',
}, },
'threat.enrichments.indicator.marking.tlp.version': { 'threat.enrichments.indicator.marking.tlp': {
dashed_name: 'threat-enrichments-indicator-marking-tlp',
description: 'Traffic Light Protocol sharing markings.',
example: 'CLEAR',
expected_values: ['WHITE', 'CLEAR', 'GREEN', 'AMBER', 'AMBER+STRICT', 'RED'],
flat_name: 'threat.enrichments.indicator.marking.tlp',
ignore_above: 1024,
level: 'extended',
name: 'enrichments.indicator.marking.tlp',
normalize: [],
short: 'Indicator TLP marking',
type: 'keyword',
},
'threat.enrichments.indicator.marking.tlp_version': {
dashed_name: 'threat-enrichments-indicator-marking-tlp-version', dashed_name: 'threat-enrichments-indicator-marking-tlp-version',
description: 'Traffic Light Protocol version.', description: 'Traffic Light Protocol version.',
example: 2, example: 2,
flat_name: 'threat.enrichments.indicator.marking.tlp.version', flat_name: 'threat.enrichments.indicator.marking.tlp_version',
ignore_above: 1024, ignore_above: 1024,
level: 'extended', level: 'extended',
name: 'enrichments.indicator.marking.tlp.version', name: 'enrichments.indicator.marking.tlp_version',
normalize: [], normalize: [],
short: 'Indicator TLP version', short: 'Indicator TLP version',
type: 'keyword', type: 'keyword',
@ -16202,6 +16215,18 @@ export const EcsFlat = {
short: 'Indicator TLP marking', short: 'Indicator TLP marking',
type: 'keyword', type: 'keyword',
}, },
'threat.indicator.marking.tlp_version': {
dashed_name: 'threat-indicator-marking-tlp-version',
description: 'Traffic Light Protocol version.',
example: 2,
flat_name: 'threat.indicator.marking.tlp_version',
ignore_above: 1024,
level: 'extended',
name: 'indicator.marking.tlp_version',
normalize: [],
short: 'Indicator TLP version',
type: 'keyword',
},
'threat.indicator.modified_at': { 'threat.indicator.modified_at': {
dashed_name: 'threat-indicator-modified-at', dashed_name: 'threat-indicator-modified-at',
description: description:
@ -17129,18 +17154,6 @@ export const EcsFlat = {
short: 'Threat subtechnique URL reference.', short: 'Threat subtechnique URL reference.',
type: 'keyword', type: 'keyword',
}, },
'threat.threat.indicator.marking.tlp.version': {
dashed_name: 'threat-threat-indicator-marking-tlp-version',
description: 'Traffic Light Protocol version.',
example: 2,
flat_name: 'threat.threat.indicator.marking.tlp.version',
ignore_above: 1024,
level: 'extended',
name: 'threat.indicator.marking.tlp.version',
normalize: [],
short: 'Indicator TLP version',
type: 'keyword',
},
'tls.cipher': { 'tls.cipher': {
dashed_name: 'tls-cipher', dashed_name: 'tls-cipher',
description: 'String indicating the cipher used during the current connection.', description: 'String indicating the cipher used during the current connection.',

View file

@ -15969,14 +15969,27 @@ export const EcsNested = {
short: 'Date/time indicator was last reported.', short: 'Date/time indicator was last reported.',
type: 'date', type: 'date',
}, },
'threat.enrichments.indicator.marking.tlp.version': { 'threat.enrichments.indicator.marking.tlp': {
dashed_name: 'threat-enrichments-indicator-marking-tlp',
description: 'Traffic Light Protocol sharing markings.',
example: 'CLEAR',
expected_values: ['WHITE', 'CLEAR', 'GREEN', 'AMBER', 'AMBER+STRICT', 'RED'],
flat_name: 'threat.enrichments.indicator.marking.tlp',
ignore_above: 1024,
level: 'extended',
name: 'enrichments.indicator.marking.tlp',
normalize: [],
short: 'Indicator TLP marking',
type: 'keyword',
},
'threat.enrichments.indicator.marking.tlp_version': {
dashed_name: 'threat-enrichments-indicator-marking-tlp-version', dashed_name: 'threat-enrichments-indicator-marking-tlp-version',
description: 'Traffic Light Protocol version.', description: 'Traffic Light Protocol version.',
example: 2, example: 2,
flat_name: 'threat.enrichments.indicator.marking.tlp.version', flat_name: 'threat.enrichments.indicator.marking.tlp_version',
ignore_above: 1024, ignore_above: 1024,
level: 'extended', level: 'extended',
name: 'enrichments.indicator.marking.tlp.version', name: 'enrichments.indicator.marking.tlp_version',
normalize: [], normalize: [],
short: 'Indicator TLP version', short: 'Indicator TLP version',
type: 'keyword', type: 'keyword',
@ -18414,6 +18427,18 @@ export const EcsNested = {
short: 'Indicator TLP marking', short: 'Indicator TLP marking',
type: 'keyword', type: 'keyword',
}, },
'threat.indicator.marking.tlp_version': {
dashed_name: 'threat-indicator-marking-tlp-version',
description: 'Traffic Light Protocol version.',
example: 2,
flat_name: 'threat.indicator.marking.tlp_version',
ignore_above: 1024,
level: 'extended',
name: 'indicator.marking.tlp_version',
normalize: [],
short: 'Indicator TLP version',
type: 'keyword',
},
'threat.indicator.modified_at': { 'threat.indicator.modified_at': {
dashed_name: 'threat-indicator-modified-at', dashed_name: 'threat-indicator-modified-at',
description: description:
@ -19344,18 +19369,6 @@ export const EcsNested = {
short: 'Threat subtechnique URL reference.', short: 'Threat subtechnique URL reference.',
type: 'keyword', type: 'keyword',
}, },
'threat.threat.indicator.marking.tlp.version': {
dashed_name: 'threat-threat-indicator-marking-tlp-version',
description: 'Traffic Light Protocol version.',
example: 2,
flat_name: 'threat.threat.indicator.marking.tlp.version',
ignore_above: 1024,
level: 'extended',
name: 'threat.indicator.marking.tlp.version',
normalize: [],
short: 'Indicator TLP version',
type: 'keyword',
},
}, },
group: 2, group: 2,
name: 'threat', name: 'threat',

View file

@ -57,7 +57,7 @@ import { EcsVlan } from './vlan';
import { EcsVulnerability } from './vulnerability'; import { EcsVulnerability } from './vulnerability';
import { EcsX509 } from './x509'; import { EcsX509 } from './x509';
export const EcsVersion = '8.6.0' as const; export const EcsVersion = '8.6.1' as const;
/** /**
* Exporting raw schema files for easy programmatic use * Exporting raw schema files for easy programmatic use

View file

@ -554,6 +554,10 @@ export interface EcsThreat {
* Traffic Light Protocol sharing markings. * Traffic Light Protocol sharing markings.
*/ */
tlp?: string; tlp?: string;
/**
* Traffic Light Protocol version.
*/
tlp_version?: string;
}; };
/** /**
@ -875,17 +879,4 @@ export interface EcsThreat {
reference?: string[]; reference?: string[];
}; };
}; };
threat?: {
indicator?: {
marking?: {
tlp?: {
/**
* Traffic Light Protocol version.
*/
version?: string;
};
};
};
};
} }