New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Carbon Black Cloud] | Remove missing fields based on API doc #5208

Closed

kcreddy opened this issue Feb 8, 2023 · 1 comment · Fixed by #5927

Assignees

Labels

bug Integration:carbon_black_cloud

Contributor

kcreddy commented Feb 8, 2023

https://docs.elastic.co/integrations/carbon_black_cloud#alert mentions event.url, but not found on https://developer.carbonblack.com/reference/carbon-black-cloud/platform/latest/alerts-api/#fields.
Also here are additional fields not in sync.
- carbon_black_cloud.alert.device.external_ip
- carbon_black_cloud.alert.device.internal_ip

Fix would be to look at all fields that are missing from the API but present in the integration doc and ingest pipeline and remove their references.

The text was updated successfully, but these errors were encountered:

kcreddy added bug Integration:carbon_black_cloud labels

kcreddy self-assigned this

kcreddy added the Team:Security-External Integrations label

elasticmachine commented Feb 8, 2023

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

kcreddy mentioned this issue

[Carbon Black Cloud] Cleanup fields based on Alert API doc #5927

Merged

4 tasks

kcreddy closed this as completed in #5927

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment