Skip to content

Remove event.original removal processors (integrations B* to C*)#10897

Merged
andrewkroh merged 9 commits into
elastic:mainfrom
Alphayeeeet:refactor-remove-event-original-removal-b+c
Sep 3, 2024
Merged

Remove event.original removal processors (integrations B* to C*)#10897
andrewkroh merged 9 commits into
elastic:mainfrom
Alphayeeeet:refactor-remove-event-original-removal-b+c

Conversation

@Alphayeeeet

@Alphayeeeet Alphayeeeet commented Aug 27, 2024 •
edited
Loading

Copy link
Copy Markdown
Contributor

Please label as enhancement

Proposed commit message

Remove event.original removal processors

  • Barracuda
  • Barracuda Cloudgen FW
  • Bitdefender
  • [ ] Bluecoat --> will be reverted (Deprecated)
  • Box events
  • Carbon Black Cloud
  • Cassandra
  • Ceph
  • Checkpoint
  • Cisa Kevs
  • Cisco Aironet
  • Cisco Asa
  • Cisco Duo
  • Cisco Ftd
  • Ciso Ios
  • Cisco Ise
  • Cisco Meraki
  • Cisco Nexus
  • Cisco Secure Email Gateway
  • Cisco Secure Endpoint
  • Cisco Umbrella
  • Citrix ADC
  • Citrix WAF
  • Cloudflare
  • Cloudflare Logpush
  • CoreDNS
  • Crowdstrike
  • Cyberarkpas
  • Cybereason
  • Cylance

Related issues

Review #10072 for additional info

@Alphayeeeet Alphayeeeet requested review from a team as code owners August 27, 2024 15:04
@Alphayeeeet Alphayeeeet marked this pull request as draft August 27, 2024 15:04
@andrewkroh andrewkroh added enhancement New feature or request Integration:coredns CoreDNS Integration:ceph Ceph Integration:cisco_asa Cisco ASA Integration:cisco_umbrella Cisco Umbrella Integration:cyberarkpas CyberArk Privileged Access Security Integration:cisco_duo Cisco Duo Integration:cisco_aironet Cisco Aironet (Community supported) Integration:cisa_kevs CISA Known Exploited Vulnerabilities (Community supported) Integration:cybereason Cybereason Integration:cisco_secure_email_gateway Cisco Secure Email Gateway Integration:cassandra Cassandra Integration:bluecoat Blue Coat Director Logs (Deprecated) Integration:cisco_secure_endpoint Cisco Secure Endpoint Integration:cylance CylanceProtect Logs (Deprecated) Integration:cloudflare_logpush Cloudflare Logpush Integration:carbon_black_cloud VMware Carbon Black Cloud Integration:box_events Box Events Integration:cisco_ios Cisco IOS Integration:cisco_meraki Cisco Meraki Integration:cisco_ftd Cisco FTD Integration:crowdstrike CrowdStrike Integration:checkpoint Check Point Integration:barracuda Barracuda Web Application Firewall Integration:citrix_waf Citrix Web App Firewall labels Aug 27, 2024
@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package box_events - 2.10.0 containing this change is available at https://epr.elastic.co/search?package=box_events

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package carbon_black_cloud - 2.5.0 containing this change is available at https://epr.elastic.co/search?package=carbon_black_cloud

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cassandra - 1.16.0 containing this change is available at https://epr.elastic.co/search?package=cassandra

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package ceph - 1.7.0 containing this change is available at https://epr.elastic.co/search?package=ceph

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package checkpoint - 1.33.0 containing this change is available at https://epr.elastic.co/search?package=checkpoint

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cisa_kevs - 1.3.0 containing this change is available at https://epr.elastic.co/search?package=cisa_kevs

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cisco_aironet - 1.14.0 containing this change is available at https://epr.elastic.co/search?package=cisco_aironet

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cisco_asa - 2.37.0 containing this change is available at https://epr.elastic.co/search?package=cisco_asa

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cisco_duo - 1.26.0 containing this change is available at https://epr.elastic.co/search?package=cisco_duo

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cisco_ftd - 3.4.0 containing this change is available at https://epr.elastic.co/search?package=cisco_ftd

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cisco_ios - 1.27.0 containing this change is available at https://epr.elastic.co/search?package=cisco_ios

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cisco_ise - 1.23.0 containing this change is available at https://epr.elastic.co/search?package=cisco_ise

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cisco_meraki - 1.24.0 containing this change is available at https://epr.elastic.co/search?package=cisco_meraki

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cisco_nexus - 1.2.0 containing this change is available at https://epr.elastic.co/search?package=cisco_nexus

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cisco_secure_email_gateway - 1.24.0 containing this change is available at https://epr.elastic.co/search?package=cisco_secure_email_gateway

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cisco_secure_endpoint - 2.27.0 containing this change is available at https://epr.elastic.co/search?package=cisco_secure_endpoint

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cisco_umbrella - 1.26.0 containing this change is available at https://epr.elastic.co/search?package=cisco_umbrella

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package citrix_adc - 1.8.0 containing this change is available at https://epr.elastic.co/search?package=citrix_adc

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package citrix_waf - 1.16.0 containing this change is available at https://epr.elastic.co/search?package=citrix_waf

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cloudflare - 2.28.0 containing this change is available at https://epr.elastic.co/search?package=cloudflare

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cloudflare_logpush - 1.23.0 containing this change is available at https://epr.elastic.co/search?package=cloudflare_logpush

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package coredns - 0.9.0 containing this change is available at https://epr.elastic.co/search?package=coredns

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package crowdstrike - 1.40.0 containing this change is available at https://epr.elastic.co/search?package=crowdstrike

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cyberarkpas - 2.22.0 containing this change is available at https://epr.elastic.co/search?package=cyberarkpas

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cybereason - 0.3.0 containing this change is available at https://epr.elastic.co/search?package=cybereason

@elasticmachine

elasticmachine commented Sep 3, 2024

Copy link
Copy Markdown

Package cylance - 0.21.0 containing this change is available at https://epr.elastic.co/search?package=cylance

@efd6 efd6 mentioned this pull request Sep 5, 2024
Merged
harnish-crest-data pushed a commit to chavdaharnish/integrations that referenced this pull request Feb 4, 2025
@Alphayeeeet
Remove event.original removal processors (integrations B* to C*) (ela…
8c719de 
…stic#10897)

Delete the remove event.original processors from the pipelines because as of 8.11 the Fleet final pipeline now does this automatically when the `preserve_original_event` tag is not present in the event.

This bumps the minimum version to 8.11.0 because it depends on the Fleet final pipeline changes.

Relates elastic#10072
harnish-crest-data pushed a commit to chavdaharnish/integrations that referenced this pull request Feb 5, 2025
@Alphayeeeet
Remove event.original removal processors (integrations B* to C*) (ela…
cdf7b59 
…stic#10897)

Delete the remove event.original processors from the pipelines because as of 8.11 the Fleet final pipeline now does this automatically when the `preserve_original_event` tag is not present in the event.

This bumps the minimum version to 8.11.0 because it depends on the Fleet final pipeline changes.

Relates elastic#10072
@Alphayeeeet Alphayeeeet deleted the refactor-remove-event-original-removal-b+c branch February 7, 2025 16:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@andrewkroh andrewkroh andrewkroh approved these changes
+1 more reviewer
@muthu-mps muthu-mps muthu-mps approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

enhancement New feature or request Integration:barracuda_cloudgen_firewall Barracuda CloudGen Firewall Logs Integration:barracuda Barracuda Web Application Firewall Integration:bitdefender BitDefender (Community supported) Integration:box_events Box Events Integration:carbon_black_cloud VMware Carbon Black Cloud Integration:cassandra Cassandra Integration:ceph Ceph Integration:checkpoint Check Point Integration:cisa_kevs CISA Known Exploited Vulnerabilities (Community supported) Integration:cisco_aironet Cisco Aironet (Community supported) Integration:cisco_asa Cisco ASA Integration:cisco_duo Cisco Duo Integration:cisco_ftd Cisco FTD Integration:cisco_ios Cisco IOS Integration:cisco_ise Cisco ISE Integration:cisco_meraki Cisco Meraki Integration:cisco_nexus Cisco Nexus Integration:cisco_secure_email_gateway Cisco Secure Email Gateway Integration:cisco_secure_endpoint Cisco Secure Endpoint Integration:cisco_umbrella Cisco Umbrella Integration:citrix_adc Citrix ADC Integration:citrix_waf Citrix Web App Firewall Integration:cloudflare_logpush Cloudflare Logpush Integration:cloudflare Cloudflare (Community supported) Integration:coredns CoreDNS Integration:crowdstrike CrowdStrike Integration:cyberarkpas CyberArk Privileged Access Security Integration:cybereason Cybereason Integration:cylance CylanceProtect Logs (Deprecated) Team:Obs-InfraObs Observability Infrastructure Monitoring team [elastic/obs-infraobs-integrations] Team:Security-Deployment and Devices DEPRECATED Deployment and Devices Security team [elastic/sec-deployment-and-devices] Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@Alphayeeeet @andrewkroh @elasticmachine @taylor-swanson @muthu-mps