Code

[Suricata] Update fields and paths#8550

Code

Merged

adriansr merged 16 commits intoelastic:feature-suricataelastic/beats:feature-suricatafrom adriansr:feature-suricata-fieldsadriansr/beats:feature-suricata-fieldsCopy head branch name to clipboardOct 16, 2018

+1,060-74

Commits

Commits on Oct 16, 2018

• Update eve.json paths

  adriansr

  committed
  957aa9a

• Remove ecs prefix from fields, some renames and http fields

  Show description for d5e1b31
  adriansr

  committed
  d5e1b31

• Added region_iso_code to geolocation fields

  adriansr

  committed
  91044eb

• Create source_ecs for 6.x compatibility

  adriansr

  committed
  8b1b1a6

• Update dashboards fields

  adriansr

  committed
  1eb261a

• Restore src_ip and dest_ip fields

  adriansr

  committed
  d17d60c

• Added fields to suricata.eve

  Show description for 9953493
  adriansr

  committed
  9953493

• Replace usages of set/painless with convert

  adriansr

  committed
  7e0c95a

• Populate ECS fields only if source exists

  Show description for a2ced16
  adriansr

  committed
  a2ced16

• Replace painless with convert

  adriansr

  committed
  9c74b65

• More fields from long running suricata

  adriansr

  committed
  04d1704

• Update fields in Alert dashboard

  adriansr

  committed
  2ce28b8

• Update overview dashboard

  adriansr

  committed
  2233e01

• Missing source and destination port fields

  adriansr

  committed
  26bd7c5

• Use ECS fields in suricata dashboards' saved searches

  adriansr

  committed
  60c6532

• Remove uninteresting suricata fields

  adriansr

  committed
  dd0d4e9