Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add network.direction classification to rsa2elk modules #23114

Closed
andrewstucki opened this issue Dec 14, 2020 · 3 comments
Closed

Add network.direction classification to rsa2elk modules #23114

andrewstucki opened this issue Dec 14, 2020 · 3 comments

Comments

@andrewstucki
Copy link

Describe the enhancement:

In order to support network.direction setting in our rsa2elk modules, we can leverage the new add_network_direction processor in any of our modules that use "perimeter"-based network models (i.e. firewalls, etc.). Currently however, all rsa2elk modules have the same module configuration. Since certain modules, such as AV modules, are "host"-based, we should have a way of making each module have the ability to leverage distinct configuration.

This issue is to track adding support for distinct configuration in the generated modules and also leveraging the new procssor for network.direction enrichment in the "perimeter"-based modules.

@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Dec 14, 2020
@elasticmachine
Copy link
Collaborator

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

@botelastic botelastic bot removed the needs_team Indicates that the issue/PR needs a Team:* label label Dec 14, 2020
@legoguy1000
Copy link
Contributor

I started some of this in #24620

@botelastic
Copy link

botelastic bot commented Mar 22, 2022

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@botelastic botelastic bot added the Stalled label Mar 22, 2022
@botelastic botelastic bot closed this as completed Sep 18, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants