[Auditbeat] System module 6.7 / 7.0 - Githubissues

elastic / beats

:tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash

https://www.elastic.co/products/beats

Other

92 stars 4.92k forks source link

[Auditbeat] System module 6.7 / 7.0 #10103

Closed cwurm closed 5 years ago

cwurm commented 5 years ago

Meta issue to track the features making it into a release of the Auditbeat system module.

Further tasks are tracked in the backlog issue.

General

[x] Kibana dashboards (done: https://github.com/elastic/beats/pull/10511)
[x] Add entity IDs (done: https://github.com/elastic/beats/pull/10500)

1. Package

[x] Initial implementation (done: https://github.com/elastic/beats/pull/8436)
[x] RPM support (done: https://github.com/elastic/beats/pull/9092)
[x] Rename to package, implement scheduled state reporting, and change to single documents (done: https://github.com/elastic/beats/pull/10225)
[x] Detect package updates (done: https://github.com/elastic/beats/pull/10508)
[x] Documentation (done: https://github.com/elastic/beats/pull/9512)

2. Process

[x] Add owner information (uid/gid at least) (addded to elastic/go-sysinfo: https://github.com/elastic/go-sysinfo/pull/34, done: https://github.com/elastic/beats/pull/9963)

4. Login

[x] Implement metricset (done: https://github.com/elastic/beats/pull/9327)
[x] Tests with sample /var/log/wtmp file (done: https://github.com/elastic/beats/pull/9327)

elasticmachine commented 5 years ago

Pinging @elastic/secops

cwurm commented 5 years ago

Updated and moved items to the backlog.