Skip to content

Remove event.original removal processors (integrations B* to C*) #10897

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
andrewkroh merged 9 commits into from
Sep 3, 2024
Merged

Remove event.original removal processors (integrations B* to C*) #10897

andrewkroh merged 9 commits into from
Sep 3, 2024

Conversation

@Alphayeeeet
Copy link
Contributor

@Alphayeeeet Alphayeeeet commented Aug 27, 2024 •
edited
Loading

Please label as enhancement

Proposed commit message

Remove event.original removal processors

  • Barracuda
  • Barracuda Cloudgen FW
  • Bitdefender
  • [ ] Bluecoat --> will be reverted (Deprecated)
  • Box events
  • Carbon Black Cloud
  • Cassandra
  • Ceph
  • Checkpoint
  • Cisa Kevs
  • Cisco Aironet
  • Cisco Asa
  • Cisco Duo
  • Cisco Ftd
  • Ciso Ios
  • Cisco Ise
  • Cisco Meraki
  • Cisco Nexus
  • Cisco Secure Email Gateway
  • Cisco Secure Endpoint
  • Cisco Umbrella
  • Citrix ADC
  • Citrix WAF
  • Cloudflare
  • Cloudflare Logpush
  • CoreDNS
  • Crowdstrike
  • Cyberarkpas
  • Cybereason
  • Cylance

Related issues

Review #10072 for additional info

@Alphayeeeet Alphayeeeet requested review from a team as code owners August 27, 2024 15:04
@Alphayeeeet Alphayeeeet marked this pull request as draft August 27, 2024 15:04
@andrewkroh andrewkroh added enhancement New feature or request Integration:coredns CoreDNS Integration:ceph Ceph Integration:cisco_asa Cisco ASA Integration:cisco_umbrella Cisco Umbrella Integration:cyberarkpas CyberArk Privileged Access Security Integration:cisco_duo Cisco Duo Integration:cisco_aironet Cisco Aironet (Community supported) Integration:cisa_kevs CISA Known Exploited Vulnerabilities (Community supported) Integration:cybereason Cybereason Integration:cisco_secure_email_gateway Cisco Secure Email Gateway Integration:cassandra Cassandra Integration:bluecoat Blue Coat Director Logs (Deprecated) Integration:cisco_secure_endpoint Cisco Secure Endpoint Integration:cylance CylanceProtect Logs (Deprecated) Integration:cloudflare_logpush Cloudflare Logpush Integration:carbon_black_cloud VMware Carbon Black Cloud Integration:box_events Box Events Integration:cisco_ios Cisco IOS Integration:cisco_meraki Cisco Meraki Integration:cisco_ftd Cisco FTD Integration:crowdstrike CrowdStrike Integration:checkpoint Check Point Integration:barracuda Barracuda Web Application Firewall Integration:citrix_waf Citrix Web App Firewall labels Aug 27, 2024
@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package box_events - 2.10.0 containing this change is available at https://epr.elastic.co/search?package=box_events

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package carbon_black_cloud - 2.5.0 containing this change is available at https://epr.elastic.co/search?package=carbon_black_cloud

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cassandra - 1.16.0 containing this change is available at https://epr.elastic.co/search?package=cassandra

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package ceph - 1.7.0 containing this change is available at https://epr.elastic.co/search?package=ceph

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package checkpoint - 1.33.0 containing this change is available at https://epr.elastic.co/search?package=checkpoint

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cisa_kevs - 1.3.0 containing this change is available at https://epr.elastic.co/search?package=cisa_kevs

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cisco_aironet - 1.14.0 containing this change is available at https://epr.elastic.co/search?package=cisco_aironet

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cisco_asa - 2.37.0 containing this change is available at https://epr.elastic.co/search?package=cisco_asa

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cisco_duo - 1.26.0 containing this change is available at https://epr.elastic.co/search?package=cisco_duo

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cisco_ftd - 3.4.0 containing this change is available at https://epr.elastic.co/search?package=cisco_ftd

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cisco_ios - 1.27.0 containing this change is available at https://epr.elastic.co/search?package=cisco_ios

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cisco_ise - 1.23.0 containing this change is available at https://epr.elastic.co/search?package=cisco_ise

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cisco_meraki - 1.24.0 containing this change is available at https://epr.elastic.co/search?package=cisco_meraki

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cisco_nexus - 1.2.0 containing this change is available at https://epr.elastic.co/search?package=cisco_nexus

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cisco_secure_email_gateway - 1.24.0 containing this change is available at https://epr.elastic.co/search?package=cisco_secure_email_gateway

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cisco_secure_endpoint - 2.27.0 containing this change is available at https://epr.elastic.co/search?package=cisco_secure_endpoint

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cisco_umbrella - 1.26.0 containing this change is available at https://epr.elastic.co/search?package=cisco_umbrella

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package citrix_adc - 1.8.0 containing this change is available at https://epr.elastic.co/search?package=citrix_adc

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package citrix_waf - 1.16.0 containing this change is available at https://epr.elastic.co/search?package=citrix_waf

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cloudflare - 2.28.0 containing this change is available at https://epr.elastic.co/search?package=cloudflare

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cloudflare_logpush - 1.23.0 containing this change is available at https://epr.elastic.co/search?package=cloudflare_logpush

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package coredns - 0.9.0 containing this change is available at https://epr.elastic.co/search?package=coredns

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package crowdstrike - 1.40.0 containing this change is available at https://epr.elastic.co/search?package=crowdstrike

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cyberarkpas - 2.22.0 containing this change is available at https://epr.elastic.co/search?package=cyberarkpas

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cybereason - 0.3.0 containing this change is available at https://epr.elastic.co/search?package=cybereason

@elasticmachine
Copy link

elasticmachine commented Sep 3, 2024

Package cylance - 0.21.0 containing this change is available at https://epr.elastic.co/search?package=cylance

@efd6 efd6 mentioned this pull request Sep 5, 2024
Merged
harnish-crest-data pushed a commit to chavdaharnish/integrations that referenced this pull request Feb 4, 2025
@Alphayeeeet
Remove event.original removal processors (integrations B* to C*) (ela…
8c719de 
…stic#10897)

Delete the remove event.original processors from the pipelines because as of 8.11 the Fleet final pipeline now does this automatically when the `preserve_original_event` tag is not present in the event.

This bumps the minimum version to 8.11.0 because it depends on the Fleet final pipeline changes.

Relates elastic#10072
harnish-crest-data pushed a commit to chavdaharnish/integrations that referenced this pull request Feb 5, 2025
@Alphayeeeet
Remove event.original removal processors (integrations B* to C*) (ela…
cdf7b59 
…stic#10897)

Delete the remove event.original processors from the pipelines because as of 8.11 the Fleet final pipeline now does this automatically when the `preserve_original_event` tag is not present in the event.

This bumps the minimum version to 8.11.0 because it depends on the Fleet final pipeline changes.

Relates elastic#10072
@Alphayeeeet Alphayeeeet deleted the refactor-remove-event-original-removal-b+c branch February 7, 2025 16:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@andrewkroh andrewkroh andrewkroh approved these changes

@muthu-mps muthu-mps muthu-mps approved these changes

Assignees

No one assigned

Labels

enhancement New feature or request Integration:barracuda_cloudgen_firewall Barracuda CloudGen Firewall Logs Integration:barracuda Barracuda Web Application Firewall Integration:bitdefender BitDefender (Community supported) Integration:box_events Box Events Integration:carbon_black_cloud VMware Carbon Black Cloud Integration:cassandra Cassandra Integration:ceph Ceph Integration:checkpoint Check Point Integration:cisa_kevs CISA Known Exploited Vulnerabilities (Community supported) Integration:cisco_aironet Cisco Aironet (Community supported) Integration:cisco_asa Cisco ASA Integration:cisco_duo Cisco Duo Integration:cisco_ftd Cisco FTD Integration:cisco_ios Cisco IOS Integration:cisco_ise Cisco ISE Integration:cisco_meraki Cisco Meraki Integration:cisco_nexus Cisco Nexus Integration:cisco_secure_email_gateway Cisco Secure Email Gateway Integration:cisco_secure_endpoint Cisco Secure Endpoint Integration:cisco_umbrella Cisco Umbrella Integration:citrix_adc Citrix ADC Integration:citrix_waf Citrix Web App Firewall Integration:cloudflare_logpush Cloudflare Logpush Integration:cloudflare Cloudflare (Community supported) Integration:coredns CoreDNS Integration:crowdstrike CrowdStrike Integration:cyberarkpas CyberArk Privileged Access Security Integration:cybereason Cybereason Integration:cylance CylanceProtect Logs (Deprecated) Team:Obs-InfraObs Observability Infrastructure Monitoring team [elastic/obs-infraobs-integrations] Team:Security-Deployment and Devices DEPRECATED Deployment and Devices Security team [elastic/sec-deployment-and-devices] Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@Alphayeeeet @andrewkroh @elasticmachine @taylor-swanson @muthu-mps