[ti_abusech] AbuseCH Integration Missing mapping for event.* fields

[iamhowardtheduck]

The Abuse-CH integration for Elastic-Agent is missing several event.* fields. Without this mapping, conflicts occur within the logs-* data view.

[elasticmachine]

Pinging @elastic/integrations (Team:Integrations)

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

[andrewkroh]

Relates: elastic/elastic-package#147

[iamhowardtheduck]

This issue still exists in version 8.1.2 for logs-ti_abusech.url-default and is missing the event.created field date mapping. Users will be required to update the template then reindex the data.

[botelastic]

Hi! We just realized that we haven't looked into this issue in a while. We're sorry! We're labeling this issue as Stale to make it hit our filters and make sure we get back to it as soon as possible. In the meantime, it'd be extremely helpful if you could take a look at it as well and confirm its relevance. A simple comment with a nice emoji will be enough :+1. Thank you for your contribution!