ti_misp: update the use of fingerprint processors - Githubissues

elastic / integrations

Elastic Integrations

https://www.elastic.co/integrations

Other

30 stars 447 forks source link

ti_misp: update the use of fingerprint processors #11824

Closed chemamartinez closed 5 hours ago

chemamartinez commented 6 hours ago

Proposed commit message

Adding a fingerprint processor for the threat_attributes data stream to avoid ingesting the same indicators every time a request to the API is made.

Updated the fingerprint for the threat data stream, by including created/updated timestamps, so subsequent updates of the indicators are also ingested.

Checklist

[ ] I have reviewed tips for building integrations and this pull request is aligned with them.
[x] I have verified that all data streams collect metrics or logs.
[x] I have added an entry to my package's changelog.yml file.
[ ] I have verified that Kibana version constraints are current according to guidelines.
[ ] I have verified that any added dashboard complies with Kibana's Dashboard good practices

elasticmachine commented 6 hours ago

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

elastic-vault-github-plugin-prod[bot] commented 6 hours ago

:rocket: Benchmarks report

To see the full report comment with /test benchmark fullreport

elasticmachine commented 6 hours ago

:green_heart: Build Succeeded

Buildkite Build
Commit: b9e52eb8d7b355304169994b6e0053a1fa99322a

cc @chemamartinez

elastic-sonarqube[bot] commented 6 hours ago

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

elastic-vault-github-plugin-prod[bot] commented 4 hours ago

Package ti_misp - 1.35.8 containing this change is available at https://epr.elastic.co/package/ti_misp/1.35.8/