symantec_endpoint_security: fix mapping of ses.device-name to ecs fie…

…lds (elastic#11908)
Alphayeeeet · Nov 28, 2024 · 6bbbd47 · 6bbbd47
1 parent 5666b6e
commit 6bbbd47
Show file tree

Hide file tree

Showing 11 changed files with 73 additions and 7 deletions.
diff --git a/packages/symantec_endpoint_security/changelog.yml b/packages/symantec_endpoint_security/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.2.1"
+  changes:
+    - description: Fix mapping of `ses.device_name` to ECS fields.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/11908
 - version: "1.2.0"
   changes:
     - description: Added support for Azure Blob Storage input, updated documentation and field mappings accordingly.

diff --git a/...security/data_stream/event/_dev/test/pipeline/test-category-application.log-expected.json b/...security/data_stream/event/_dev/test/pipeline/test-category-application.log-expected.json
@@ -126,6 +126,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [
@@ -1370,6 +1371,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [
@@ -2589,6 +2591,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [
@@ -3934,6 +3937,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [
@@ -6279,6 +6283,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [
@@ -7521,6 +7526,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [
@@ -8762,6 +8768,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [
@@ -9999,6 +10006,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [

diff --git a/...point_security/data_stream/event/_dev/test/pipeline/test-category-audit.log-expected.json b/...point_security/data_stream/event/_dev/test/pipeline/test-category-audit.log-expected.json
@@ -132,6 +132,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [
@@ -1363,6 +1364,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [
@@ -2628,6 +2630,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [

diff --git a/..._security/data_stream/event/_dev/test/pipeline/test-category-diagnostic.log-expected.json b/..._security/data_stream/event/_dev/test/pipeline/test-category-diagnostic.log-expected.json
@@ -136,6 +136,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [
@@ -3225,6 +3226,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [

diff --git a/...point_security/data_stream/event/_dev/test/pipeline/test-category-event.log-expected.json b/...point_security/data_stream/event/_dev/test/pipeline/test-category-event.log-expected.json
@@ -21,6 +21,7 @@
                 "severity": 2
             },
             "host": {
+                "hostname": "HR-Desk1",
                 "os": {
                     "name": "Windows 10 Pro"
                 }
@@ -95,7 +96,6 @@
                 "version": "1.1"
             },
             "source": {
-                "address": "HR-Desk1",
                 "ip": "81.2.69.144"
             },
             "tags": [
@@ -124,6 +124,7 @@
                 "severity": 3
             },
             "host": {
+                "hostname": "45GHFS4",
                 "os": {
                     "name": "Windows 11 Enterprise"
                 }
@@ -200,7 +201,6 @@
                 "version": "1.2"
             },
             "source": {
-                "address": "45GHFS4",
                 "ip": "81.2.69.144"
             },
             "tags": [

diff --git a/...int_security/data_stream/event/_dev/test/pipeline/test-category-license.log-expected.json b/...int_security/data_stream/event/_dev/test/pipeline/test-category-license.log-expected.json
@@ -126,6 +126,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [
@@ -1361,6 +1362,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [

diff --git a/...nt_security/data_stream/event/_dev/test/pipeline/test-category-security.log-expected.json b/...nt_security/data_stream/event/_dev/test/pipeline/test-category-security.log-expected.json
@@ -130,6 +130,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [
@@ -1489,6 +1490,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [
@@ -4323,6 +4325,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [
@@ -6450,6 +6453,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows Server 2019 Standard Edition",
                     "version": [
@@ -8874,6 +8878,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [
@@ -11090,6 +11095,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [
@@ -13698,6 +13704,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [
@@ -16686,6 +16693,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [
@@ -18985,6 +18993,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [
@@ -21671,6 +21680,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [
@@ -23940,6 +23950,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [
@@ -26198,6 +26209,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [
@@ -27505,6 +27517,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [
@@ -28787,6 +28800,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [
@@ -30120,6 +30134,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [
@@ -31365,6 +31380,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [
@@ -32610,6 +32626,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [
@@ -33849,6 +33866,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [
@@ -35058,6 +35076,7 @@
                     "country_iso_code": "US",
                     "region_name": "US-CA"
                 },
+                "name": "device.name.computer.domain",
                 "os": {
                     "name": "Windows 10 Home Basic",
                     "version": [