Skip to content

Commit dabb28e

Browse files
navnit-elasticnavnit-elastic
authored
google_workspace: add missing field mappings in data streams (#14549)
Add missing field mappings in admin, device, drive, login and token data streams.
1 parent edb386f commit dabb28e

36 files changed

+1175
-21
lines changed

‎packages/google_workspace/changelog.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,9 @@
11
# newer versions go on top
2+
- version: "2.43.0"
3+
changes:
4+
- description: Add missing field mappings in the `admin`, `device`, `drive`, `login` and `token` data streams.
5+
type: enhancement
6+
link: https://github.com/elastic/integrations/pull/14549
27
- version: "2.42.0"
38
changes:
49
- description: Use `terminate` processor instead of `fail` processor to handle agent errors.

‎packages/google_workspace/data_stream/admin/_dev/test/pipeline/test-admin-application.log-expected.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -776,4 +776,4 @@
776776
}
777777
}
778778
]
779-
}
779+
}

‎packages/google_workspace/data_stream/admin/_dev/test/pipeline/test-admin-calendar.log-expected.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1063,4 +1063,4 @@
10631063
}
10641064
}
10651065
]
1066-
}
1066+
}

‎packages/google_workspace/data_stream/admin/_dev/test/pipeline/test-admin-chat.log-expected.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -332,4 +332,4 @@
332332
}
333333
}
334334
]
335-
}
335+
}

‎packages/google_workspace/data_stream/admin/_dev/test/pipeline/test-admin-chromeos.log-expected.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1723,4 +1723,4 @@
17231723
}
17241724
}
17251725
]
1726-
}
1726+
}

‎packages/google_workspace/data_stream/admin/_dev/test/pipeline/test-admin-contacts.log-expected.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -87,4 +87,4 @@
8787
}
8888
}
8989
]
90-
}
90+
}

‎packages/google_workspace/data_stream/admin/_dev/test/pipeline/test-admin-delegatedadmin.log-expected.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -653,4 +653,4 @@
653653
}
654654
}
655655
]
656-
}
656+
}

‎packages/google_workspace/data_stream/admin/_dev/test/pipeline/test-admin-docs.log-expected.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -359,4 +359,4 @@
359359
}
360360
}
361361
]
362-
}
362+
}

‎packages/google_workspace/data_stream/admin/_dev/test/pipeline/test-admin-domain.log

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,7 @@
33
{"kind":"admin#reports#activity","id":{"time":"2020-10-02T15:00:00Z","uniqueQualifier":1,"applicationName":"admin","customerId":"1"},"actor":{"callerType":"USER","email":"[email protected]","profileId":1},"ownerDomain":"elastic.com","ipAddress":"67.43.156.13","events":{"type":"DOMAIN_SETTINGS","name":"ADD_APPLICATION_TO_WHITELIST","parameters":[{"name":"APP_ID","value":"id"},{"name":"APPLICATION_NAME","value":"app name"}]}}
44
{"kind":"admin#reports#activity","id":{"time":"2020-10-02T15:00:00Z","uniqueQualifier":1,"applicationName":"admin","customerId":"1"},"actor":{"callerType":"USER","email":"[email protected]","profileId":1},"ownerDomain":"elastic.com","ipAddress":"67.43.156.13","events":{"type":"DOMAIN_SETTINGS","name":"CHANGE_ADVERTISEMENT_OPTION","parameters":[{"name":"DOMAIN_NAME","value":"example.com"},{"name":"NEW_VALUE","value":"new"},{"name":"OLD_VALUE","value":"old"}]}}
55
{"kind":"admin#reports#activity","id":{"time":"2020-10-02T15:00:00Z","uniqueQualifier":1,"applicationName":"admin","customerId":"1"},"actor":{"callerType":"USER","email":"[email protected]","profileId":1},"ownerDomain":"elastic.com","ipAddress":"67.43.156.13","events":{"type":"DOMAIN_SETTINGS","name":"CREATE_ALERT","parameters":[{"name":"ALERT_NAME","value":"alert name"}]}}
6+
{"kind":"admin#reports#activity","id":{"time":"2020-10-02T15:00:00Z","uniqueQualifier":1,"applicationName":"admin","customerId":"1"},"actor":{"callerType":"USER","email":"[email protected]","profileId":1},"ownerDomain":"elastic.com","ipAddress":"67.43.156.13","events":{"type":"DOMAIN_SETTINGS","name":"CREATE_ALERT","parameters":[{"name":"ALERT_NAME","value":"alert name"},{"name":"ALERT_ID","value":"1abc23d4-56e-f78ghi-9j0k-lm1n"}]}}
67
{"kind":"admin#reports#activity","id":{"time":"2020-10-02T15:00:00Z","uniqueQualifier":1,"applicationName":"admin","customerId":"1"},"actor":{"callerType":"USER","email":"[email protected]","profileId":1},"ownerDomain":"elastic.com","ipAddress":"67.43.156.13","events":{"type":"DOMAIN_SETTINGS","name":"CHANGE_ALERT_CRITERIA","parameters":[{"name":"ALERT_NAME","value":"alert name"}]}}
78
{"kind":"admin#reports#activity","id":{"time":"2020-10-02T15:00:00Z","uniqueQualifier":1,"applicationName":"admin","customerId":"1"},"actor":{"callerType":"USER","email":"[email protected]","profileId":1},"ownerDomain":"elastic.com","ipAddress":"67.43.156.13","events":{"type":"DOMAIN_SETTINGS","name":"DELETE_ALERT","parameters":[{"name":"ALERT_NAME","value":"alert name"}]}}
89
{"kind":"admin#reports#activity","id":{"time":"2020-10-02T15:00:00Z","uniqueQualifier":1,"applicationName":"admin","customerId":"1"},"actor":{"callerType":"USER","email":"[email protected]","profileId":1},"ownerDomain":"elastic.com","ipAddress":"67.43.156.13","events":{"type":"DOMAIN_SETTINGS","name":"ALERT_RECEIVERS_CHANGED","parameters":[{"name":"ALERT_NAME","value":"alert name"},{"name":"NEW_VALUE","value":"new"},{"name":"OLD_VALUE","value":"old"}]}}

‎packages/google_workspace/data_stream/admin/_dev/test/pipeline/test-admin-domain.log-expected.json

Lines changed: 79 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -391,6 +391,84 @@
391391
"name": "foo"
392392
}
393393
},
394+
{
395+
"@timestamp": "2020-10-02T15:00:00.000Z",
396+
"ecs": {
397+
"version": "8.16.0"
398+
},
399+
"event": {
400+
"action": "CREATE_ALERT",
401+
"category": [
402+
"iam"
403+
],
404+
"id": "1",
405+
"kind": "event",
406+
"original": "{\"kind\":\"admin#reports#activity\",\"id\":{\"time\":\"2020-10-02T15:00:00Z\",\"uniqueQualifier\":1,\"applicationName\":\"admin\",\"customerId\":\"1\"},\"actor\":{\"callerType\":\"USER\",\"email\":\"[email protected]\",\"profileId\":1},\"ownerDomain\":\"elastic.com\",\"ipAddress\":\"67.43.156.13\",\"events\":{\"type\":\"DOMAIN_SETTINGS\",\"name\":\"CREATE_ALERT\",\"parameters\":[{\"name\":\"ALERT_NAME\",\"value\":\"alert name\"},{\"name\":\"ALERT_ID\",\"value\":\"1abc23d4-56e-f78ghi-9j0k-lm1n\"}]}}",
407+
"provider": "admin",
408+
"type": [
409+
"creation"
410+
]
411+
},
412+
"google_workspace": {
413+
"actor": {
414+
"type": "USER"
415+
},
416+
"admin": {
417+
"alert": {
418+
"id": "1abc23d4-56e-f78ghi-9j0k-lm1n",
419+
"name": "alert name"
420+
}
421+
},
422+
"event": {
423+
"type": "DOMAIN_SETTINGS"
424+
},
425+
"kind": "admin#reports#activity",
426+
"organization": {
427+
"domain": "elastic.com"
428+
}
429+
},
430+
"organization": {
431+
"id": "1"
432+
},
433+
"related": {
434+
"ip": [
435+
"67.43.156.13"
436+
],
437+
"user": [
438+
"foo"
439+
]
440+
},
441+
"source": {
442+
"as": {
443+
"number": 35908
444+
},
445+
"geo": {
446+
"continent_name": "Asia",
447+
"country_iso_code": "BT",
448+
"country_name": "Bhutan",
449+
"location": {
450+
"lat": 27.5,
451+
"lon": 90.5
452+
}
453+
},
454+
"ip": "67.43.156.13",
455+
"user": {
456+
"domain": "bar.com",
457+
"email": "[email protected]",
458+
"id": "1",
459+
"name": "foo"
460+
}
461+
},
462+
"tags": [
463+
"preserve_original_event"
464+
],
465+
"user": {
466+
"domain": "bar.com",
467+
"email": "[email protected]",
468+
"id": "1",
469+
"name": "foo"
470+
}
471+
},
394472
{
395473
"@timestamp": "2020-10-02T15:00:00.000Z",
396474
"ecs": {
@@ -6666,4 +6744,4 @@
66666744
}
66676745
}
66686746
]
6669-
}
6747+
}

0 commit comments

Comments
 (0)