[Cloud Security] Added deployment_mode and properties CSPM, Elastic Connector #11203

seanrathier · 2024-09-20T18:17:19Z

We are updating the elastic-connector and the cloud-security-posture integrations to package-spec version 3.2.3 so that when deployment_mode agentless is selected we can pass the org, division and team information to the Agentless-API.

This will only be merged when package-spec version 3.2.3 is released.

Checklist

I have reviewed tips for building integrations and this pull request is aligned with them.
I have verified that all data streams collect metrics or logs.
I have added an entry to my package's changelog.yml file.
I have verified that Kibana version constraints are current according to guidelines.

How to test this PR locally

Add a CSPM integration

Related issues

seanrathier · 2024-10-10T21:25:31Z

When version 3.2.3 gets released next week, the CI should pass, and we should be able to merge.

packages/cloud_security_posture/changelog.yml

packages/elastic_connectors/changelog.yml

packages/elastic_connectors/manifest.yml

elastic-vault-github-plugin-prod · 2024-10-11T22:26:49Z

🚀 Benchmarks report

Package `1password` 👍(0) 💚(0) 💔(3)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`audit_events`	4504.5	2941.18	-1563.32 (-34.71%)	💔
`item_usages`	10752.69	3484.32	-7268.37 (-67.6%)	💔
`signin_attempts`	5780.35	3937.01	-1843.34 (-31.89%)	💔

Package `abnormal_security` 👍(1) 💚(0) 💔(3)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`audit`	3937.01	3246.75	-690.26 (-17.53%)	💔
`case`	10101.01	6369.43	-3731.58 (-36.94%)	💔
`threat`	3134.8	2638.52	-496.28 (-15.83%)	💔

Package `activemq` 👍(3) 💚(0) 💔(2)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`broker`	100000	71428.57	-28571.43 (-28.57%)	💔
`queue`	111111.11	66666.67	-44444.44 (-40%)	💔

Package `apache` 👍(1) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`access`	4081.63	2506.27	-1575.36 (-38.6%)	💔

Package `apache_tomcat` 👍(2) 💚(4) 💔(3)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`access`	2164.5	1615.51	-548.99 (-25.36%)	💔
`localhost`	23809.52	14492.75	-9316.77 (-39.13%)	💔
`memory`	24390.24	18518.52	-5871.72 (-24.07%)	💔

Package `auditd_manager` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`auditd`	14705.88	8620.69	-6085.19 (-41.38%)	💔

Package `auth0` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`logs`	4385.96	3412.97	-972.99 (-22.18%)	💔

Package `authentik` 👍(1) 💚(0) 💔(2)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`event`	2985.07	2272.73	-712.34 (-23.86%)	💔
`group`	4484.3	3257.33	-1226.97 (-27.36%)	💔

Package `awsfirehose` 👍(0) 💚(1) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`metrics`	9900.99	8333.33	-1567.66 (-15.83%)	💔

Package `azure` 👍(5) 💚(5) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`springcloudlogs`	4385.96	3115.26	-1270.7 (-28.97%)	💔

Package `azure_frontdoor` 👍(1) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`waf`	4926.11	4016.06	-910.05 (-18.47%)	💔

Package `azure_functions` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`functionapplogs`	2083.33	1709.4	-373.93 (-17.95%)	💔

Package `azure_network_watcher_vnet` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	1280.41	1068.38	-212.03 (-16.56%)	💔

Package `azure_openai` 👍(1) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`metrics`	250000	166666.67	-83333.33 (-33.33%)	💔

Package `barracuda` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`waf`	564.97	468.16	-96.81 (-17.14%)	💔

Package `barracuda_cloudgen_firewall` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	11904.76	6060.61	-5844.15 (-49.09%)	💔

Package `bitwarden` 👍(0) 💚(0) 💔(5)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`collection`	23255.81	15625	-7630.81 (-32.81%)	💔
`event`	3225.81	2155.17	-1070.64 (-33.19%)	💔
`group`	20833.33	14285.71	-6547.62 (-31.43%)	💔
`member`	9174.31	4347.83	-4826.48 (-52.61%)	💔
`policy`	8474.58	5617.98	-2856.6 (-33.71%)	💔

Package `bluecoat` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`director`	62500	30303.03	-32196.97 (-51.52%)	💔

Package `carbon_black_cloud` 👍(2) 💚(2) 💔(2)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`alert`	2358.49	1577.29	-781.2 (-33.12%)	💔
`alert_v7`	1412.43	1079.91	-332.52 (-23.54%)	💔

Package `carbonblack_edr` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	5524.86	4032.26	-1492.6 (-27.02%)	💔

Package `ceph` 👍(3) 💚(1) 💔(3)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`cluster_disk`	12658.23	9090.91	-3567.32 (-28.18%)	💔
`cluster_health`	24390.24	18867.92	-5522.32 (-22.64%)	💔
`osd_performance`	40000	24390.24	-15609.76 (-39.02%)	💔

Package `cisco_asa` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	929.37	602.41	-326.96 (-35.18%)	💔

Package `cisco_duo` 👍(0) 💚(3) 💔(3)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`summary`	52631.58	43478.26	-9153.32 (-17.39%)	💔
`telephony`	52631.58	38461.54	-14170.04 (-26.92%)	💔
`telephony_v2`	30303.03	19230.77	-11072.26 (-36.54%)	💔

Package `cisco_meraki_metrics` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`device_health`	45454.55	34482.76	-10971.79 (-24.14%)	💔

Package `claroty_ctd` 👍(2) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`baseline`	2881.84	2439.02	-442.82 (-15.37%)	💔

Package `cloudflare` 👍(1) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`logpull`	710.73	527.98	-182.75 (-25.71%)	💔

Package `cloudflare_logpush` 👍(2) 💚(0) 💔(16)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`gateway_network`	6535.95	5434.78	-1101.17 (-16.85%)	💔
`http_request`	1577.29	1267.43	-309.86 (-19.65%)	💔
`magic_ids`	11494.25	8196.72	-3297.53 (-28.69%)	💔
`nel_report`	30303.03	18181.82	-12121.21 (-40%)	💔
`network_analytics`	2949.85	2252.25	-697.6 (-23.65%)	💔
`network_session`	4545.45	3745.32	-800.13 (-17.6%)	💔
`sinkhole_http`	5882.35	4672.9	-1209.45 (-20.56%)	💔
`spectrum_event`	3703.7	3076.92	-626.78 (-16.92%)	💔
`workers_trace`	8620.69	4545.45	-4075.24 (-47.27%)	💔
`access_request`	2881.84	2020.2	-861.64 (-29.9%)	💔
`casb`	5813.95	2793.3	-3020.65 (-51.96%)	💔
`device_posture`	5617.98	3731.34	-1886.64 (-33.58%)	💔
`dns`	15151.52	8771.93	-6379.59 (-42.11%)	💔
`dns_firewall`	7462.69	2906.98	-4555.71 (-61.05%)	💔
`firewall_event`	3484.32	1930.5	-1553.82 (-44.59%)	💔
`gateway_http`	5376.34	3067.48	-2308.86 (-42.94%)	💔

Package `coredns` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	2717.39	2267.57	-449.82 (-16.55%)	💔

Package `crowdstrike` 👍(3) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`host`	1897.53	1472.75	-424.78 (-22.39%)	💔

Package `cyberark_pta` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`events`	11627.91	8130.08	-3497.83 (-30.08%)	💔

Package `cybereason` 👍(2) 💚(3) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`malware`	8264.46	4566.21	-3698.25 (-44.75%)	💔

Package `darktrace` 👍(1) 💚(0) 💔(2)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`ai_analyst_alert`	772.8	634.92	-137.88 (-17.84%)	💔
`model_breach_alert`	874.13	712.25	-161.88 (-18.52%)	💔

Package `elastic_package_registry` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`metrics`	7518.8	3831.42	-3687.38 (-49.04%)	💔

Package `elasticsearch` 👍(2) 💚(2) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`deprecation`	7692.31	4854.37	-2837.94 (-36.89%)	💔

Package `entityanalytics_ad` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`user`	1644.74	1269.04	-375.7 (-22.84%)	💔

Package `entityanalytics_okta` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`user`	2000	1567.4	-432.6 (-21.63%)	💔

Package `eset_protect` 👍(2) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`device_task`	4878.05	4115.23	-762.82 (-15.64%)	💔

Package `f5` 👍(0) 💚(0) 💔(2)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`bigipafm`	125000	28571.43	-96428.57 (-77.14%)	💔
`bigipapm`	76923.08	18867.92	-58055.16 (-75.47%)	💔

Package `f5_bigip` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	655.74	490.2	-165.54 (-25.24%)	💔

Package `fireeye` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`nx`	2136.75	1736.11	-400.64 (-18.75%)	💔

Package `forgerock` 👍(4) 💚(2) 💔(5)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`idm_core`	45454.55	34482.76	-10971.79 (-24.14%)	💔
`am_authentication`	12195.12	8849.56	-3345.56 (-27.43%)	💔
`am_config`	17241.38	12820.51	-4420.87 (-25.64%)	💔
`am_core`	6410.26	3906.25	-2504.01 (-39.06%)	💔
`idm_authentication`	29411.76	14285.71	-15126.05 (-51.43%)	💔

Package `fortinet_forticlient` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	62500	15384.62	-47115.38 (-75.38%)	💔

Package `fortinet_fortiedr` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	1552.8	621.89	-930.91 (-59.95%)	💔

Package `fortinet_fortigate` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	1123.6	942.51	-181.09 (-16.12%)	💔

Package `fortinet_fortimail` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	1061.57	884.17	-177.4 (-16.71%)	💔

Package `fortinet_fortimanager` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	1364.26	678.43	-685.83 (-50.27%)	💔

Package `gitlab` 👍(0) 💚(2) 💔(3)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`api`	4000	3378.38	-621.62 (-15.54%)	💔
`audit`	5847.95	4545.45	-1302.5 (-22.27%)	💔
`auth`	7633.59	5847.95	-1785.64 (-23.39%)	💔

Package `google_scc` 👍(1) 💚(1) 💔(2)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`audit`	2132.2	1788.91	-343.29 (-16.1%)	💔
`finding`	4219.41	3333.33	-886.08 (-21%)	💔

Package `google_workspace` 👍(5) 💚(5) 💔(4)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`rules`	2994.01	2267.57	-726.44 (-24.26%)	💔
`saml`	8474.58	5000	-3474.58 (-41%)	💔
`token`	1956.95	1485.88	-471.07 (-24.07%)	💔
`context_aware_access`	3558.72	1845.02	-1713.7 (-48.15%)	💔

Package `hadoop` 👍(1) 💚(3) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`cluster`	5524.86	4484.3	-1040.56 (-18.83%)	💔

Package `hashicorp_vault` 👍(0) 💚(0) 💔(2)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`audit`	4115.23	2487.56	-1627.67 (-39.55%)	💔
`log`	12987.01	7246.38	-5740.63 (-44.2%)	💔

Package `ibmmq` 👍(1) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`qmgr`	3623.19	2590.67	-1032.52 (-28.5%)	💔

Package `infoblox_bloxone_ddi` 👍(1) 💚(1) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`dns_data`	3105.59	2375.3	-730.29 (-23.52%)	💔

Package `jamf_compliance_reporter` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	1385.04	1095.29	-289.75 (-20.92%)	💔

Package `juniper_netscreen` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	58823.53	41666.67	-17156.86 (-29.17%)	💔

Package `juniper_srx` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	1033.06	360.88	-672.18 (-65.07%)	💔

Package `kibana` 👍(0) 💚(1) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`audit`	6289.31	5181.35	-1107.96 (-17.62%)	💔

Package `lastpass` 👍(1) 💚(0) 💔(2)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`detailed_shared_folder`	10416.67	6369.43	-4047.24 (-38.85%)	💔
`event_report`	1538.46	1012.15	-526.31 (-34.21%)	💔

Package `menlo` 👍(0) 💚(1) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`web`	3125	2398.08	-726.92 (-23.26%)	💔

Package `microsoft_dhcp` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	30303.03	11764.71	-18538.32 (-61.18%)	💔

Package `microsoft_sqlserver` 👍(0) 💚(0) 💔(2)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`audit`	2141.33	1506.02	-635.31 (-29.67%)	💔
`log`	13333.33	7812.5	-5520.83 (-41.41%)	💔

Package `mimecast` 👍(5) 💚(3) 💔(2)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`threat_intel_malware_customer`	10526.32	8928.57	-1597.75 (-15.18%)	💔
`ttp_ip_logs`	18518.52	13333.33	-5185.19 (-28%)	💔

Package `modsecurity` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`auditlog`	964.32	587.54	-376.78 (-39.07%)	💔

Package `mysql_enterprise` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`audit`	2770.08	1612.9	-1157.18 (-41.77%)	💔

Package `network_traffic` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`memcached`	1834.86	823.72	-1011.14 (-55.11%)	💔

Package `nginx_ingress_controller` 👍(0) 💚(1) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`error`	28571.43	20408.16	-8163.27 (-28.57%)	💔

Package `opencanary` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`events`	2624.67	1430.62	-1194.05 (-45.49%)	💔

Package `oracle` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`database_audit`	22727.27	11235.96	-11491.31 (-50.56%)	💔

Package `panw_cortex_xdr` 👍(1) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`alerts`	1858.74	1536.1	-322.64 (-17.36%)	💔

Package `panw_metrics` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`system`	23809.52	20000	-3809.52 (-16%)	💔

Package `ping_one` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`audit`	2688.17	2016.13	-672.04 (-25%)	💔

Package `pps` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	3424.66	2309.47	-1115.19 (-32.56%)	💔

Package `prisma_cloud` 👍(3) 💚(1) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`incident_audit`	2624.67	2057.61	-567.06 (-21.61%)	💔

Package `proofpoint_on_demand` 👍(2) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`mail`	2915.45	2347.42	-568.03 (-19.48%)	💔

Package `proofpoint_tap` 👍(1) 💚(1) 💔(2)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`message_blocked`	2320.19	1499.25	-820.94 (-35.38%)	💔
`message_delivered`	2551.02	2083.33	-467.69 (-18.33%)	💔

Package `pulse_connect_secure` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	3521.13	2890.17	-630.96 (-17.92%)	💔

Package `qualys_vmdr` 👍(2) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`user_activity`	8849.56	5917.16	-2932.4 (-33.14%)	💔

Package `rapid7_insightvm` 👍(0) 💚(0) 💔(2)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`asset`	4926.11	3891.05	-1035.06 (-21.01%)	💔
`vulnerability`	5464.48	3773.58	-1690.9 (-30.94%)	💔

Package `salesforce` 👍(1) 💚(0) 💔(3)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`login`	14492.75	12048.19	-2444.56 (-16.87%)	💔
`logout`	33333.33	22727.27	-10606.06 (-31.82%)	💔
`setupaudittrail`	10752.69	8333.33	-2419.36 (-22.5%)	💔

Package `snort` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	31250	20833.33	-10416.67 (-33.33%)	💔

Package `sonicwall_firewall` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`log`	1394.7	557.1	-837.6 (-60.06%)	💔

Package `sophos` 👍(0) 💚(0) 💔(2)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`utm`	1607.72	1144.16	-463.56 (-28.83%)	💔
`xg`	1333.33	1068.38	-264.95 (-19.87%)	💔

Package `symantec_edr_cloud` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`incident`	2793.3	2364.07	-429.23 (-15.37%)	💔

Package `symantec_endpoint_security` 👍(1) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`incident`	4329	3533.57	-795.43 (-18.37%)	💔

Package `tanium` 👍(2) 💚(3) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`action_history`	11627.91	9615.38	-2012.53 (-17.31%)	💔

Package `teleport` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`audit`	582.07	441.31	-140.76 (-24.18%)	💔

Package `tenable_io` 👍(2) 💚(1) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`vulnerability`	1748.25	1483.68	-264.57 (-15.13%)	💔

Package `tenable_sc` 👍(1) 💚(1) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`plugin`	2057.61	1697.79	-359.82 (-17.49%)	💔

Package `ti_cybersixgill` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`threat`	2457	2044.99	-412.01 (-16.77%)	💔

Package `ti_eclecticiq` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`threat`	2183.41	1851.85	-331.56 (-15.19%)	💔

Package `ti_eset` 👍(3) 💚(1) 💔(3)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`botnet`	10416.67	5376.34	-5040.33 (-48.39%)	💔
`cc`	15384.62	8130.08	-7254.54 (-47.15%)	💔
`url`	21276.6	4784.69	-16491.91 (-77.51%)	💔

Package `ti_maltiverse` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`indicator`	2164.5	1709.4	-455.1 (-21.03%)	💔

Package `ti_misp` 👍(1) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`threat_attributes`	2816.9	1798.56	-1018.34 (-36.15%)	💔

Package `tines` 👍(1) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`time_saved`	47619.05	29411.76	-18207.29 (-38.24%)	💔

Package `trellix_epo_cloud` 👍(0) 💚(2) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`group`	18181.82	13157.89	-5023.93 (-27.63%)	💔

Package `tychon` 👍(15) 💚(3) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`hardware`	3412.97	1980.2	-1432.77 (-41.98%)	💔

Package `vsphere` 👍(6) 💚(1) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`virtualmachine`	35714.29	29411.76	-6302.53 (-17.65%)	💔

Package `websphere_application_server` 👍(2) 💚(1) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`servlet`	22727.27	16129.03	-6598.24 (-29.03%)	💔

Package `windows` 👍(4) 💚(4) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`applocker_exe_and_dll`	6802.72	4950.5	-1852.22 (-27.23%)	💔

Package `wiz` 👍(0) 💚(3) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`vulnerability`	2770.08	2272.73	-497.35 (-17.95%)	💔

Package `zeek` 👍(22) 💚(6) 💔(15)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`intel`	43478.26	30303.03	-13175.23 (-30.3%)	💔
`known_hosts`	90909.09	71428.57	-19480.52 (-21.43%)	💔
`known_services`	90909.09	76923.08	-13986.01 (-15.38%)	💔
`ntp`	52631.58	34482.76	-18148.82 (-34.48%)	💔
`pe`	27777.78	21276.6	-6501.18 (-23.4%)	💔
`rdp`	22727.27	13157.89	-9569.38 (-42.11%)	💔
`smb_files`	30303.03	23809.52	-6493.51 (-21.43%)	💔
`smb_mapping`	25000	16393.44	-8606.56 (-34.43%)	💔
`ssl`	45454.55	38461.54	-6993.01 (-15.38%)	💔
`syslog`	66666.67	55555.56	-11111.11 (-16.67%)	💔
`traceroute`	38461.54	31250	-7211.54 (-18.75%)	💔
`tunnel`	37037.04	31250	-5787.04 (-15.63%)	💔
`x509`	16129.03	12195.12	-3933.91 (-24.39%)	💔
`dns`	35714.29	17543.86	-18170.43 (-50.88%)	💔
`ftp`	41666.67	25000	-16666.67 (-40%)	💔

Package `zerofox` 👍(0) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`alerts`	2717.39	1779.36	-938.03 (-34.52%)	💔

Package `zscaler_zia` 👍(6) 💚(1) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`audit`	3952.57	3164.56	-788.01 (-19.94%)	💔

Package `zscaler_zpa` 👍(3) 💚(1) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
`browser_access`	2702.7	2083.33	-619.37 (-22.92%)	💔

To see the full report comment with /test benchmark fullreport

elastic-sonarqube · 2024-10-11T22:32:08Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
89.1% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

maxcold · 2024-10-14T08:10:02Z

packages/cloud_security_posture/changelog.yml

@@ -21,6 +26,9 @@
      link: https://github.com/elastic/integrations/pull/11274
 - version: "1.11.0-preview08"
  changes:
+   - description: Added deployment_mode agentless to the policy template


remove this changelog entry as you added it to a new version

maxcold · 2024-10-14T08:10:25Z

packages/elastic_connectors/changelog.yml

 - version: 0.0.2
  changes:
    - description: Add connector_name as the connector input variable
      type: enhancement
      link: https://github.com/elastic/integrations/pull/11267
 - version: 0.0.1
  changes:
+    - description: Added owner information when deployment_mode has agentless enabled


here as well

maxcold

@seanrathier seems like some old code hasn't been removed, pls check

maxcold · 2024-10-14T08:13:07Z

packages/elastic_connectors/manifest.yml

@@ -37,6 +37,9 @@ policy_templates:
        enabled: false
      agentless:
        enabled: true
+        organization: elastic
+        division: engineering
+        team: ingestion-team


if I understood the review comment correctly the ask was to change ingestion-team to search-extract-and-transform but now we have both for some reason

elasticmachine · 2024-10-14T16:23:28Z

💔 Build Failed

Buildkite Build
Commit: 6b47993

Failed CI Steps

History

💔 Build #17075 failed b2c4bc8
💔 Build #16304 failed af1b249e95fcbb5a51ae28610a1873d1f1f07cdb
💔 Build #16246 failed 18678bd478ada16db93c9ae7f446073a5359c40f

cc @seanrathier

jsoriano · 2024-10-14T16:28:20Z

This change is co-dependant of #11400, we will merge both changes together in the other PR. Thanks!

mrodm · 2024-10-15T08:02:06Z

@seanrathier @maxcold #11400 has already been merged. I think this PR can be closed.

elastic-vault-github-plugin-prod · 2024-10-15T08:20:19Z

Package cloud_security_posture - 1.11.0-preview11 containing this change is available at https://epr.elastic.co/search?package=cloud_security_posture

elastic-vault-github-plugin-prod · 2024-10-15T08:20:19Z

Package elastic_connectors - 0.0.3 containing this change is available at https://epr.elastic.co/search?package=elastic_connectors

elastic-vault-github-plugin-prod · 2024-11-12T14:52:32Z

Package cloud_security_posture - 1.11.0 containing this change is available at https://epr.elastic.co/package/cloud_security_posture/1.11.0/

seanrathier changed the title ~~Added deployment_mode and properties~~ [Cloud Security] Added deployment_mode and properties CSPM, Okta, Elastic Connector Sep 20, 2024

andrewkroh added Integration:cloud_security_posture Security Posture Management Integration:elastic_connectors Elastic Connectors labels Sep 20, 2024

seanrathier changed the title ~~[Cloud Security] Added deployment_mode and properties CSPM, Okta, Elastic Connector~~ [Cloud Security] Added deployment_mode and properties CSPM, Elastic Connector Sep 23, 2024

eyalkraft mentioned this pull request Sep 25, 2024

[Cloud Security] enable asset inventory package to support agentless #11238

Merged

4 tasks

seanrathier added breaking change enhancement New feature or request and removed breaking change labels Oct 10, 2024

seanrathier marked this pull request as ready for review October 10, 2024 21:20

seanrathier requested a review from a team October 10, 2024 21:20

seanrathier requested a review from a team as a code owner October 10, 2024 21:20

seanrathier self-assigned this Oct 10, 2024

andrewkroh added Team:Cloud Security Label for the Cloud Security team [elastic/cloud-security-posture] Team:Search-Extract and Transform Search - Extract and Transform [elastic/search-extract-and-transform] labels Oct 10, 2024

maxcold reviewed Oct 11, 2024

View reviewed changes

packages/cloud_security_posture/changelog.yml Outdated Show resolved Hide resolved

packages/cloud_security_posture/changelog.yml Outdated Show resolved Hide resolved

packages/elastic_connectors/changelog.yml Outdated Show resolved Hide resolved

seanstory reviewed Oct 11, 2024

View reviewed changes

packages/elastic_connectors/manifest.yml Outdated Show resolved Hide resolved

seanrathier force-pushed the 304-label-the-cloud-security-integration-package branch from af1b249 to b0d21fd Compare October 11, 2024 20:43

seanrathier requested review from a team as code owners October 11, 2024 20:43

seanrathier removed request for a team, faec, leehinman, MichaelKatsoulis and constanca-m October 11, 2024 21:05

seanrathier marked this pull request as ready for review October 11, 2024 21:05

seanrathier requested a review from a team as a code owner October 11, 2024 21:05

seanrathier requested review from maxcold and seanstory October 11, 2024 21:05

maxcold reviewed Oct 14, 2024

View reviewed changes

maxcold requested changes Oct 14, 2024

View reviewed changes

mrodm mentioned this pull request Oct 14, 2024

Bump github.com/elastic/elastic-package from 0.104.0 to 0.105.0 #11400

Merged

remove duplicated changelog entries and update missed team handle

6b47993

maxcold self-requested a review October 14, 2024 16:14

maxcold approved these changes Oct 14, 2024

View reviewed changes

DianaJourdan approved these changes Oct 15, 2024

View reviewed changes

maxcold closed this Oct 15, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Cloud Security] Added deployment_mode and properties CSPM, Elastic Connector #11203

[Cloud Security] Added deployment_mode and properties CSPM, Elastic Connector #11203

seanrathier commented Sep 20, 2024 •

edited

Loading

seanrathier commented Oct 10, 2024

elastic-vault-github-plugin-prod bot commented Oct 11, 2024

elastic-sonarqube bot commented Oct 11, 2024

maxcold Oct 14, 2024

maxcold Oct 14, 2024

maxcold left a comment

maxcold Oct 14, 2024

elasticmachine commented Oct 14, 2024 •

edited

Loading

jsoriano commented Oct 14, 2024

mrodm commented Oct 15, 2024

elastic-vault-github-plugin-prod bot commented Oct 15, 2024

elastic-vault-github-plugin-prod bot commented Oct 15, 2024

elastic-vault-github-plugin-prod bot commented Nov 12, 2024

[Cloud Security] Added deployment_mode and properties CSPM, Elastic Connector #11203

[Cloud Security] Added deployment_mode and properties CSPM, Elastic Connector #11203

Conversation

seanrathier commented Sep 20, 2024 • edited Loading

Checklist

How to test this PR locally

Related issues

seanrathier commented Oct 10, 2024

elastic-vault-github-plugin-prod bot commented Oct 11, 2024

🚀 Benchmarks report

Package 1password 👍(0) 💚(0) 💔(3)

Package abnormal_security 👍(1) 💚(0) 💔(3)

Package activemq 👍(3) 💚(0) 💔(2)

Package apache 👍(1) 💚(0) 💔(1)

Package apache_tomcat 👍(2) 💚(4) 💔(3)

Package auditd_manager 👍(0) 💚(0) 💔(1)

Package auth0 👍(0) 💚(0) 💔(1)

Package authentik 👍(1) 💚(0) 💔(2)

Package awsfirehose 👍(0) 💚(1) 💔(1)

Package azure 👍(5) 💚(5) 💔(1)

Package azure_frontdoor 👍(1) 💚(0) 💔(1)

Package azure_functions 👍(0) 💚(0) 💔(1)

Package azure_network_watcher_vnet 👍(0) 💚(0) 💔(1)

Package azure_openai 👍(1) 💚(0) 💔(1)

Package barracuda 👍(0) 💚(0) 💔(1)

Package barracuda_cloudgen_firewall 👍(0) 💚(0) 💔(1)

Package bitwarden 👍(0) 💚(0) 💔(5)

Package bluecoat 👍(0) 💚(0) 💔(1)

Package carbon_black_cloud 👍(2) 💚(2) 💔(2)

Package carbonblack_edr 👍(0) 💚(0) 💔(1)

Package ceph 👍(3) 💚(1) 💔(3)

Package cisco_asa 👍(0) 💚(0) 💔(1)

Package cisco_duo 👍(0) 💚(3) 💔(3)

Package cisco_meraki_metrics 👍(0) 💚(0) 💔(1)

Package claroty_ctd 👍(2) 💚(0) 💔(1)

Package cloudflare 👍(1) 💚(0) 💔(1)

Package cloudflare_logpush 👍(2) 💚(0) 💔(16)

Package coredns 👍(0) 💚(0) 💔(1)

Package crowdstrike 👍(3) 💚(0) 💔(1)

Package cyberark_pta 👍(0) 💚(0) 💔(1)

Package cybereason 👍(2) 💚(3) 💔(1)

Package darktrace 👍(1) 💚(0) 💔(2)

Package elastic_package_registry 👍(0) 💚(0) 💔(1)

Package elasticsearch 👍(2) 💚(2) 💔(1)

Package entityanalytics_ad 👍(0) 💚(0) 💔(1)

Package entityanalytics_okta 👍(0) 💚(0) 💔(1)

Package eset_protect 👍(2) 💚(0) 💔(1)

Package f5 👍(0) 💚(0) 💔(2)

Package f5_bigip 👍(0) 💚(0) 💔(1)

Package fireeye 👍(0) 💚(0) 💔(1)

Package forgerock 👍(4) 💚(2) 💔(5)

Package fortinet_forticlient 👍(0) 💚(0) 💔(1)

Package fortinet_fortiedr 👍(0) 💚(0) 💔(1)

Package fortinet_fortigate 👍(0) 💚(0) 💔(1)

Package fortinet_fortimail 👍(0) 💚(0) 💔(1)

Package fortinet_fortimanager 👍(0) 💚(0) 💔(1)

Package gitlab 👍(0) 💚(2) 💔(3)

Package google_scc 👍(1) 💚(1) 💔(2)

Package google_workspace 👍(5) 💚(5) 💔(4)

Package hadoop 👍(1) 💚(3) 💔(1)

Package hashicorp_vault 👍(0) 💚(0) 💔(2)

Package ibmmq 👍(1) 💚(0) 💔(1)

Package infoblox_bloxone_ddi 👍(1) 💚(1) 💔(1)

Package jamf_compliance_reporter 👍(0) 💚(0) 💔(1)

Package juniper_netscreen 👍(0) 💚(0) 💔(1)

Package juniper_srx 👍(0) 💚(0) 💔(1)

Package kibana 👍(0) 💚(1) 💔(1)

Package lastpass 👍(1) 💚(0) 💔(2)

Package menlo 👍(0) 💚(1) 💔(1)

Package microsoft_dhcp 👍(0) 💚(0) 💔(1)

Package microsoft_sqlserver 👍(0) 💚(0) 💔(2)

Package mimecast 👍(5) 💚(3) 💔(2)

Package modsecurity 👍(0) 💚(0) 💔(1)

Package mysql_enterprise 👍(0) 💚(0) 💔(1)

Package network_traffic 👍(0) 💚(0) 💔(1)

Package nginx_ingress_controller 👍(0) 💚(1) 💔(1)

Package opencanary 👍(0) 💚(0) 💔(1)

Package oracle 👍(0) 💚(0) 💔(1)

Package panw_cortex_xdr 👍(1) 💚(0) 💔(1)

Package panw_metrics 👍(0) 💚(0) 💔(1)

seanrathier commented Sep 20, 2024 •

edited

Loading

Package `1password` 👍(0) 💚(0) 💔(3)

Package `abnormal_security` 👍(1) 💚(0) 💔(3)

Package `activemq` 👍(3) 💚(0) 💔(2)

Package `apache` 👍(1) 💚(0) 💔(1)

Package `apache_tomcat` 👍(2) 💚(4) 💔(3)

Package `auditd_manager` 👍(0) 💚(0) 💔(1)

Package `auth0` 👍(0) 💚(0) 💔(1)

Package `authentik` 👍(1) 💚(0) 💔(2)

Package `awsfirehose` 👍(0) 💚(1) 💔(1)

Package `azure` 👍(5) 💚(5) 💔(1)

Package `azure_frontdoor` 👍(1) 💚(0) 💔(1)

Package `azure_functions` 👍(0) 💚(0) 💔(1)

Package `azure_network_watcher_vnet` 👍(0) 💚(0) 💔(1)

Package `azure_openai` 👍(1) 💚(0) 💔(1)

Package `barracuda` 👍(0) 💚(0) 💔(1)

Package `barracuda_cloudgen_firewall` 👍(0) 💚(0) 💔(1)

Package `bitwarden` 👍(0) 💚(0) 💔(5)

Package `bluecoat` 👍(0) 💚(0) 💔(1)

Package `carbon_black_cloud` 👍(2) 💚(2) 💔(2)

Package `carbonblack_edr` 👍(0) 💚(0) 💔(1)

Package `ceph` 👍(3) 💚(1) 💔(3)

Package `cisco_asa` 👍(0) 💚(0) 💔(1)

Package `cisco_duo` 👍(0) 💚(3) 💔(3)

Package `cisco_meraki_metrics` 👍(0) 💚(0) 💔(1)

Package `claroty_ctd` 👍(2) 💚(0) 💔(1)

Package `cloudflare` 👍(1) 💚(0) 💔(1)

Package `cloudflare_logpush` 👍(2) 💚(0) 💔(16)

Package `coredns` 👍(0) 💚(0) 💔(1)

Package `crowdstrike` 👍(3) 💚(0) 💔(1)

Package `cyberark_pta` 👍(0) 💚(0) 💔(1)

Package `cybereason` 👍(2) 💚(3) 💔(1)

Package `darktrace` 👍(1) 💚(0) 💔(2)

Package `elastic_package_registry` 👍(0) 💚(0) 💔(1)

Package `elasticsearch` 👍(2) 💚(2) 💔(1)

Package `entityanalytics_ad` 👍(0) 💚(0) 💔(1)

Package `entityanalytics_okta` 👍(0) 💚(0) 💔(1)

Package `eset_protect` 👍(2) 💚(0) 💔(1)

Package `f5` 👍(0) 💚(0) 💔(2)

Package `f5_bigip` 👍(0) 💚(0) 💔(1)

Package `fireeye` 👍(0) 💚(0) 💔(1)

Package `forgerock` 👍(4) 💚(2) 💔(5)

Package `fortinet_forticlient` 👍(0) 💚(0) 💔(1)

Package `fortinet_fortiedr` 👍(0) 💚(0) 💔(1)

Package `fortinet_fortigate` 👍(0) 💚(0) 💔(1)

Package `fortinet_fortimail` 👍(0) 💚(0) 💔(1)

Package `fortinet_fortimanager` 👍(0) 💚(0) 💔(1)

Package `gitlab` 👍(0) 💚(2) 💔(3)

Package `google_scc` 👍(1) 💚(1) 💔(2)

Package `google_workspace` 👍(5) 💚(5) 💔(4)

Package `hadoop` 👍(1) 💚(3) 💔(1)

Package `hashicorp_vault` 👍(0) 💚(0) 💔(2)

Package `ibmmq` 👍(1) 💚(0) 💔(1)

Package `infoblox_bloxone_ddi` 👍(1) 💚(1) 💔(1)

Package `jamf_compliance_reporter` 👍(0) 💚(0) 💔(1)

Package `juniper_netscreen` 👍(0) 💚(0) 💔(1)

Package `juniper_srx` 👍(0) 💚(0) 💔(1)

Package `kibana` 👍(0) 💚(1) 💔(1)

Package `lastpass` 👍(1) 💚(0) 💔(2)

Package `menlo` 👍(0) 💚(1) 💔(1)

Package `microsoft_dhcp` 👍(0) 💚(0) 💔(1)

Package `microsoft_sqlserver` 👍(0) 💚(0) 💔(2)

Package `mimecast` 👍(5) 💚(3) 💔(2)

Package `modsecurity` 👍(0) 💚(0) 💔(1)

Package `mysql_enterprise` 👍(0) 💚(0) 💔(1)

Package `network_traffic` 👍(0) 💚(0) 💔(1)

Package `nginx_ingress_controller` 👍(0) 💚(1) 💔(1)

Package `opencanary` 👍(0) 💚(0) 💔(1)

Package `oracle` 👍(0) 💚(0) 💔(1)

Package `panw_cortex_xdr` 👍(1) 💚(0) 💔(1)

Package `panw_metrics` 👍(0) 💚(0) 💔(1)

Package `ping_one` 👍(0) 💚(0) 💔(1)

Package `pps` 👍(0) 💚(0) 💔(1)

Package `prisma_cloud` 👍(3) 💚(1) 💔(1)

Package `proofpoint_on_demand` 👍(2) 💚(0) 💔(1)

Package `proofpoint_tap` 👍(1) 💚(1) 💔(2)

Package `pulse_connect_secure` 👍(0) 💚(0) 💔(1)

Package `qualys_vmdr` 👍(2) 💚(0) 💔(1)

Package `rapid7_insightvm` 👍(0) 💚(0) 💔(2)

Package `salesforce` 👍(1) 💚(0) 💔(3)