mirror of
https://github.com/elastic/kibana.git
synced 2025-06-27 10:40:07 -04:00
Generate kbn/ecs with ECS 8.6.1 (#151642)
## Summary This PR updates kbn/ecs to defintions generated with ECS 8.6.1 --------- Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
This commit is contained in:
parent
11dc789537
commit
d92d691946
6 changed files with 67 additions and 50 deletions
|
@ -16,7 +16,7 @@ exports[`asLoggerFactory() only allows to create new loggers. 1`] = `
|
||||||
Object {
|
Object {
|
||||||
"@timestamp": "2012-01-30T22:33:22.011-05:00",
|
"@timestamp": "2012-01-30T22:33:22.011-05:00",
|
||||||
"ecs": Object {
|
"ecs": Object {
|
||||||
"version": "8.6.0",
|
"version": "8.6.1",
|
||||||
},
|
},
|
||||||
"log": Object {
|
"log": Object {
|
||||||
"level": "TRACE",
|
"level": "TRACE",
|
||||||
|
@ -33,7 +33,7 @@ exports[`asLoggerFactory() only allows to create new loggers. 2`] = `
|
||||||
Object {
|
Object {
|
||||||
"@timestamp": "2012-01-30T17:33:22.011-05:00",
|
"@timestamp": "2012-01-30T17:33:22.011-05:00",
|
||||||
"ecs": Object {
|
"ecs": Object {
|
||||||
"version": "8.6.0",
|
"version": "8.6.1",
|
||||||
},
|
},
|
||||||
"log": Object {
|
"log": Object {
|
||||||
"level": "INFO",
|
"level": "INFO",
|
||||||
|
@ -51,7 +51,7 @@ exports[`asLoggerFactory() only allows to create new loggers. 3`] = `
|
||||||
Object {
|
Object {
|
||||||
"@timestamp": "2012-01-30T12:33:22.011-05:00",
|
"@timestamp": "2012-01-30T12:33:22.011-05:00",
|
||||||
"ecs": Object {
|
"ecs": Object {
|
||||||
"version": "8.6.0",
|
"version": "8.6.1",
|
||||||
},
|
},
|
||||||
"log": Object {
|
"log": Object {
|
||||||
"level": "FATAL",
|
"level": "FATAL",
|
||||||
|
@ -68,7 +68,7 @@ exports[`flushes memory buffer logger and switches to real logger once config is
|
||||||
Object {
|
Object {
|
||||||
"@timestamp": "2012-02-01T09:33:22.011-05:00",
|
"@timestamp": "2012-02-01T09:33:22.011-05:00",
|
||||||
"ecs": Object {
|
"ecs": Object {
|
||||||
"version": "8.6.0",
|
"version": "8.6.1",
|
||||||
},
|
},
|
||||||
"log": Object {
|
"log": Object {
|
||||||
"level": "INFO",
|
"level": "INFO",
|
||||||
|
@ -86,7 +86,7 @@ exports[`flushes memory buffer logger and switches to real logger once config is
|
||||||
Object {
|
Object {
|
||||||
"@timestamp": "2012-01-31T23:33:22.011-05:00",
|
"@timestamp": "2012-01-31T23:33:22.011-05:00",
|
||||||
"ecs": Object {
|
"ecs": Object {
|
||||||
"version": "8.6.0",
|
"version": "8.6.1",
|
||||||
},
|
},
|
||||||
"log": Object {
|
"log": Object {
|
||||||
"level": "INFO",
|
"level": "INFO",
|
||||||
|
|
|
@ -14,5 +14,5 @@ export interface EcsEcs {
|
||||||
* ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
|
* ECS version this event conforms to. `ecs.version` is a required field and must exist in all events.
|
||||||
* When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.
|
* When querying across multiple indices -- which may conform to slightly different ECS versions -- this field lets integrations adjust to the schema version of the events.
|
||||||
*/
|
*/
|
||||||
version: '8.6.0';
|
version: '8.6.1';
|
||||||
}
|
}
|
||||||
|
|
|
@ -13765,14 +13765,27 @@ export const EcsFlat = {
|
||||||
short: 'Date/time indicator was last reported.',
|
short: 'Date/time indicator was last reported.',
|
||||||
type: 'date',
|
type: 'date',
|
||||||
},
|
},
|
||||||
'threat.enrichments.indicator.marking.tlp.version': {
|
'threat.enrichments.indicator.marking.tlp': {
|
||||||
|
dashed_name: 'threat-enrichments-indicator-marking-tlp',
|
||||||
|
description: 'Traffic Light Protocol sharing markings.',
|
||||||
|
example: 'CLEAR',
|
||||||
|
expected_values: ['WHITE', 'CLEAR', 'GREEN', 'AMBER', 'AMBER+STRICT', 'RED'],
|
||||||
|
flat_name: 'threat.enrichments.indicator.marking.tlp',
|
||||||
|
ignore_above: 1024,
|
||||||
|
level: 'extended',
|
||||||
|
name: 'enrichments.indicator.marking.tlp',
|
||||||
|
normalize: [],
|
||||||
|
short: 'Indicator TLP marking',
|
||||||
|
type: 'keyword',
|
||||||
|
},
|
||||||
|
'threat.enrichments.indicator.marking.tlp_version': {
|
||||||
dashed_name: 'threat-enrichments-indicator-marking-tlp-version',
|
dashed_name: 'threat-enrichments-indicator-marking-tlp-version',
|
||||||
description: 'Traffic Light Protocol version.',
|
description: 'Traffic Light Protocol version.',
|
||||||
example: 2,
|
example: 2,
|
||||||
flat_name: 'threat.enrichments.indicator.marking.tlp.version',
|
flat_name: 'threat.enrichments.indicator.marking.tlp_version',
|
||||||
ignore_above: 1024,
|
ignore_above: 1024,
|
||||||
level: 'extended',
|
level: 'extended',
|
||||||
name: 'enrichments.indicator.marking.tlp.version',
|
name: 'enrichments.indicator.marking.tlp_version',
|
||||||
normalize: [],
|
normalize: [],
|
||||||
short: 'Indicator TLP version',
|
short: 'Indicator TLP version',
|
||||||
type: 'keyword',
|
type: 'keyword',
|
||||||
|
@ -16202,6 +16215,18 @@ export const EcsFlat = {
|
||||||
short: 'Indicator TLP marking',
|
short: 'Indicator TLP marking',
|
||||||
type: 'keyword',
|
type: 'keyword',
|
||||||
},
|
},
|
||||||
|
'threat.indicator.marking.tlp_version': {
|
||||||
|
dashed_name: 'threat-indicator-marking-tlp-version',
|
||||||
|
description: 'Traffic Light Protocol version.',
|
||||||
|
example: 2,
|
||||||
|
flat_name: 'threat.indicator.marking.tlp_version',
|
||||||
|
ignore_above: 1024,
|
||||||
|
level: 'extended',
|
||||||
|
name: 'indicator.marking.tlp_version',
|
||||||
|
normalize: [],
|
||||||
|
short: 'Indicator TLP version',
|
||||||
|
type: 'keyword',
|
||||||
|
},
|
||||||
'threat.indicator.modified_at': {
|
'threat.indicator.modified_at': {
|
||||||
dashed_name: 'threat-indicator-modified-at',
|
dashed_name: 'threat-indicator-modified-at',
|
||||||
description:
|
description:
|
||||||
|
@ -17129,18 +17154,6 @@ export const EcsFlat = {
|
||||||
short: 'Threat subtechnique URL reference.',
|
short: 'Threat subtechnique URL reference.',
|
||||||
type: 'keyword',
|
type: 'keyword',
|
||||||
},
|
},
|
||||||
'threat.threat.indicator.marking.tlp.version': {
|
|
||||||
dashed_name: 'threat-threat-indicator-marking-tlp-version',
|
|
||||||
description: 'Traffic Light Protocol version.',
|
|
||||||
example: 2,
|
|
||||||
flat_name: 'threat.threat.indicator.marking.tlp.version',
|
|
||||||
ignore_above: 1024,
|
|
||||||
level: 'extended',
|
|
||||||
name: 'threat.indicator.marking.tlp.version',
|
|
||||||
normalize: [],
|
|
||||||
short: 'Indicator TLP version',
|
|
||||||
type: 'keyword',
|
|
||||||
},
|
|
||||||
'tls.cipher': {
|
'tls.cipher': {
|
||||||
dashed_name: 'tls-cipher',
|
dashed_name: 'tls-cipher',
|
||||||
description: 'String indicating the cipher used during the current connection.',
|
description: 'String indicating the cipher used during the current connection.',
|
||||||
|
|
|
@ -15969,14 +15969,27 @@ export const EcsNested = {
|
||||||
short: 'Date/time indicator was last reported.',
|
short: 'Date/time indicator was last reported.',
|
||||||
type: 'date',
|
type: 'date',
|
||||||
},
|
},
|
||||||
'threat.enrichments.indicator.marking.tlp.version': {
|
'threat.enrichments.indicator.marking.tlp': {
|
||||||
|
dashed_name: 'threat-enrichments-indicator-marking-tlp',
|
||||||
|
description: 'Traffic Light Protocol sharing markings.',
|
||||||
|
example: 'CLEAR',
|
||||||
|
expected_values: ['WHITE', 'CLEAR', 'GREEN', 'AMBER', 'AMBER+STRICT', 'RED'],
|
||||||
|
flat_name: 'threat.enrichments.indicator.marking.tlp',
|
||||||
|
ignore_above: 1024,
|
||||||
|
level: 'extended',
|
||||||
|
name: 'enrichments.indicator.marking.tlp',
|
||||||
|
normalize: [],
|
||||||
|
short: 'Indicator TLP marking',
|
||||||
|
type: 'keyword',
|
||||||
|
},
|
||||||
|
'threat.enrichments.indicator.marking.tlp_version': {
|
||||||
dashed_name: 'threat-enrichments-indicator-marking-tlp-version',
|
dashed_name: 'threat-enrichments-indicator-marking-tlp-version',
|
||||||
description: 'Traffic Light Protocol version.',
|
description: 'Traffic Light Protocol version.',
|
||||||
example: 2,
|
example: 2,
|
||||||
flat_name: 'threat.enrichments.indicator.marking.tlp.version',
|
flat_name: 'threat.enrichments.indicator.marking.tlp_version',
|
||||||
ignore_above: 1024,
|
ignore_above: 1024,
|
||||||
level: 'extended',
|
level: 'extended',
|
||||||
name: 'enrichments.indicator.marking.tlp.version',
|
name: 'enrichments.indicator.marking.tlp_version',
|
||||||
normalize: [],
|
normalize: [],
|
||||||
short: 'Indicator TLP version',
|
short: 'Indicator TLP version',
|
||||||
type: 'keyword',
|
type: 'keyword',
|
||||||
|
@ -18414,6 +18427,18 @@ export const EcsNested = {
|
||||||
short: 'Indicator TLP marking',
|
short: 'Indicator TLP marking',
|
||||||
type: 'keyword',
|
type: 'keyword',
|
||||||
},
|
},
|
||||||
|
'threat.indicator.marking.tlp_version': {
|
||||||
|
dashed_name: 'threat-indicator-marking-tlp-version',
|
||||||
|
description: 'Traffic Light Protocol version.',
|
||||||
|
example: 2,
|
||||||
|
flat_name: 'threat.indicator.marking.tlp_version',
|
||||||
|
ignore_above: 1024,
|
||||||
|
level: 'extended',
|
||||||
|
name: 'indicator.marking.tlp_version',
|
||||||
|
normalize: [],
|
||||||
|
short: 'Indicator TLP version',
|
||||||
|
type: 'keyword',
|
||||||
|
},
|
||||||
'threat.indicator.modified_at': {
|
'threat.indicator.modified_at': {
|
||||||
dashed_name: 'threat-indicator-modified-at',
|
dashed_name: 'threat-indicator-modified-at',
|
||||||
description:
|
description:
|
||||||
|
@ -19344,18 +19369,6 @@ export const EcsNested = {
|
||||||
short: 'Threat subtechnique URL reference.',
|
short: 'Threat subtechnique URL reference.',
|
||||||
type: 'keyword',
|
type: 'keyword',
|
||||||
},
|
},
|
||||||
'threat.threat.indicator.marking.tlp.version': {
|
|
||||||
dashed_name: 'threat-threat-indicator-marking-tlp-version',
|
|
||||||
description: 'Traffic Light Protocol version.',
|
|
||||||
example: 2,
|
|
||||||
flat_name: 'threat.threat.indicator.marking.tlp.version',
|
|
||||||
ignore_above: 1024,
|
|
||||||
level: 'extended',
|
|
||||||
name: 'threat.indicator.marking.tlp.version',
|
|
||||||
normalize: [],
|
|
||||||
short: 'Indicator TLP version',
|
|
||||||
type: 'keyword',
|
|
||||||
},
|
|
||||||
},
|
},
|
||||||
group: 2,
|
group: 2,
|
||||||
name: 'threat',
|
name: 'threat',
|
||||||
|
|
|
@ -57,7 +57,7 @@ import { EcsVlan } from './vlan';
|
||||||
import { EcsVulnerability } from './vulnerability';
|
import { EcsVulnerability } from './vulnerability';
|
||||||
import { EcsX509 } from './x509';
|
import { EcsX509 } from './x509';
|
||||||
|
|
||||||
export const EcsVersion = '8.6.0' as const;
|
export const EcsVersion = '8.6.1' as const;
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Exporting raw schema files for easy programmatic use
|
* Exporting raw schema files for easy programmatic use
|
||||||
|
|
|
@ -554,6 +554,10 @@ export interface EcsThreat {
|
||||||
* Traffic Light Protocol sharing markings.
|
* Traffic Light Protocol sharing markings.
|
||||||
*/
|
*/
|
||||||
tlp?: string;
|
tlp?: string;
|
||||||
|
/**
|
||||||
|
* Traffic Light Protocol version.
|
||||||
|
*/
|
||||||
|
tlp_version?: string;
|
||||||
};
|
};
|
||||||
|
|
||||||
/**
|
/**
|
||||||
|
@ -875,17 +879,4 @@ export interface EcsThreat {
|
||||||
reference?: string[];
|
reference?: string[];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
threat?: {
|
|
||||||
indicator?: {
|
|
||||||
marking?: {
|
|
||||||
tlp?: {
|
|
||||||
/**
|
|
||||||
* Traffic Light Protocol version.
|
|
||||||
*/
|
|
||||||
version?: string;
|
|
||||||
};
|
|
||||||
};
|
|
||||||
};
|
|
||||||
};
|
|
||||||
}
|
}
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue