Initial Release of Sysdig Secure Integration #10841
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…usted params and got pipeline tests to pass
…ms. Updated documentation to match and built project
cole-labar
changed the title
|
/test |
🚀 Benchmarks reportTo see the full report comment with |
chemamartinez
requested changes
Sep 2, 2024
packages/sysdig/kibana/dashboard/sysdig-1b3c9930-f0c2-46c8-9bce-47738b8bfa33.json
Outdated
Show resolved
Hide resolved
packages/sysdig/data_stream/alerts/elasticsearch/ingest_pipeline/default.yml
Show resolved
Hide resolved
packages/sysdig/data_stream/alerts/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
chemamartinez
added
the
Team:Security-Service Integrations
|
Pinging @elastic/security-service-integrations (Team:Security-Service Integrations) |
packages/sysdig/data_stream/alerts/_dev/test/system/test-default-config.yml
Outdated
Show resolved
Hide resolved
packages/sysdig/data_stream/alerts/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
packages/sysdig/data_stream/alerts/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
packages/sysdig/data_stream/alerts/_dev/test/pipeline/test-sysdig.log-config.yml
Outdated
Show resolved
Hide resolved
Integration was connected to a Sysdig event forwarder for "live environment" testing and data was successfully intercepted! |
💚 Build Succeeded
History
|
|
chemamartinez
approved these changes
Sep 17, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
What does this PR do?
This is an initial release of a new integration for Sysdig Secure. It captures events that are created by Sysdig's Rules. It includes:
A data stream for events from Sysdig rules.
Ingest pipeline for events data stream
Mapped fields according to the ECS schema and added Fields metadata in the appropriate yml files
Dashboard and visualizations of events.
Test for pipeline for event data stream.
System test cases for event data stream.
Documentation for users on how to configure Sysdig for this integration.
Checklist
changelog.ymlfile.What's Ready to Review
How to test this PR locally
Related issues
Screenshots