weslambert 4c74e7f308 Add event.kind and set name to module[dot]dataset

2021-06-02 15:35:26 -04:00

..

beats.common

…

common

Update Sigmac mappings and config for IPs and ports

2021-03-16 09:05:35 -04:00

common.nids

…

dns.tld

Improve support for Suricata metadata #2200

2021-02-22 10:27:24 -05:00

filterlog

Switch to the ES-included community_id plugin

2021-04-29 12:08:07 -04:00

http.status

FIX: Populate http.status_message field #3408

2021-03-11 16:42:20 -05:00

import.wel

…

osquery.live_query

Initial support for Live Queries in Hunt

2021-03-04 18:21:13 -05:00

osquery.normalize

Initial support for Live Queries in Hunt

2021-03-04 18:21:13 -05:00

osquery.query_result

Differentiate between event & ingest timestamp

2021-04-13 12:55:40 -04:00

ossec

Create event.kind field and rename dataset to be module[dot]dataset

2021-06-02 15:33:18 -04:00

strelka.file

Add event.kind and set name to module[dot]dataset

2021-06-02 15:35:26 -04:00

suricata.alert

…

suricata.common

…

suricata.dhcp

FIX: Improve Suricata DHCP logging and parsing #3397

2021-03-11 11:01:51 -05:00

suricata.dnp3

…

suricata.dns

Improve support for Suricata metadata #2200

2021-02-22 13:49:29 -05:00

suricata.fileinfo

Improve support for Suricata metadata #2200

2021-02-22 10:27:24 -05:00

suricata.flow

…

suricata.ftp

Improve support for Suricata metadata #2200

2021-02-22 13:00:14 -05:00

suricata.ftp_data

…

suricata.http

FIX: Populate http.status_message field #3408

2021-03-11 16:42:20 -05:00

suricata.ikev2

…

suricata.krb5

…

suricata.nfs

…

suricata.rdp

…

suricata.sip

…

suricata.smb

…

suricata.smtp

…

suricata.snmp

…

suricata.ssh

…

suricata.tftp

…

suricata.tls

Improve support for Suricata metadata #2200

2021-02-22 10:27:24 -05:00

syslog

…

sysmon

Switch to the ES-included community_id plugin

2021-04-29 12:08:07 -04:00

win.eventlogs

Differentiate between event & ingest timestamp

2021-04-13 12:55:40 -04:00

zeek.common

Switch to the ES-included community_id plugin

2021-04-29 12:08:07 -04:00

zeek.common_ssl

…

zeek.conn

…

zeek.dce_rpc

…

zeek.dhcp

…

zeek.dnp3

…

zeek.dns

Improve support for Suricata metadata #2200

2021-02-22 10:27:24 -05:00

zeek.dpd

…

zeek.files

…

zeek.ftp

…

zeek.http

…

zeek.intel

…

zeek.irc

…

zeek.kerberos

…

zeek.modbus

…

zeek.mysql

…

zeek.notice

…

zeek.ntlm

…

zeek.pe

…

zeek.radius

…

zeek.rdp

…

zeek.rfb

…

zeek.signatures

…

zeek.sip

…

zeek.smb_files

…

zeek.smb_mapping

…

zeek.smtp

…

zeek.snmp

…

zeek.socks

…

zeek.software

…

zeek.ssh

…

zeek.ssl

…

zeek.syslog

…

zeek.tunnel

…

zeek.tunnels

…

zeek.weird

…

zeek.x509

…