Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Events generator for 5.x indices #518

Closed
9 tasks done
Tracked by #496
AlexRuiz7 opened this issue Nov 6, 2024 · 3 comments · Fixed by #553
Closed
9 tasks done
Tracked by #496

Events generator for 5.x indices #518

AlexRuiz7 opened this issue Nov 6, 2024 · 3 comments · Fixed by #553
Assignees
Labels
level/task Task issue mvp Minimum Viable Product request/operational Operational requests type/enhancement Enhancement issue

Comments

@AlexRuiz7
Copy link
Member

AlexRuiz7 commented Nov 6, 2024

Description

Wazuh 5.x includes a new set of indices, for which we need appropriate tooling for internal testing environments. Some of the indices already have its event generator. The goal of this issue is to add similar events' generator for the indices that are missing them.

Functional requirements

  • There are events generators for every index (but alerts) included in 5.x (see Add ECS docs #462).

Implementation restrictions

Plan

  • Check which indices need an events' generator.
  • Include the events' generator for the fim index.
  • Include the events' generator for the inventory-packages index.
  • Include the events' generator for the inventory-processes index.
  • Include the events' generator for the inventory-system index.
  • Include the events' generator for the inventory-hardware index.
  • Include the events' generator for the inventory-hotfixes index.
  • Include the events' generator for the inventory-networks index.
  • Include the events' generator for the inventory-port index.
@AlexRuiz7 AlexRuiz7 added level/task Task issue request/operational Operational requests type/enhancement Enhancement issue labels Nov 6, 2024
@wazuhci wazuhci moved this to Backlog in Release 5.0.0 Nov 6, 2024
@wazuhci wazuhci moved this from Backlog to In progress in Release 5.0.0 Nov 6, 2024
@QU3B1M
Copy link
Member

QU3B1M commented Nov 6, 2024

Tooling event_generator implemented on all the missing indices, also some improvements were added to the existing tools, such as replacing general warning suppression to just the required ones (urllib3 related), and default values on the inputs.

The command event generator was outdated, it wasn't working correctly, so it was updated to work with the actual status of the plugin

@wazuhci wazuhci moved this from In progress to Pending review in Release 5.0.0 Nov 6, 2024
@AlexRuiz7
Copy link
Member Author

@f-galland is adding new indices in #270

Let's generate events' generators for these indices too.

@wazuhci wazuhci moved this from Pending review to In progress in Release 5.0.0 Nov 7, 2024
@wazuhci wazuhci moved this from In progress to Pending review in Release 5.0.0 Nov 8, 2024
@wazuhci wazuhci moved this from Pending review to In progress in Release 5.0.0 Nov 11, 2024
@wazuhci wazuhci moved this from In progress to Pending review in Release 5.0.0 Nov 11, 2024
@wazuhci wazuhci moved this from Pending review to Blocked in Release 5.0.0 Nov 11, 2024
@AlexRuiz7 AlexRuiz7 added the mvp Minimum Viable Product label Nov 12, 2024
@wazuhci wazuhci moved this from Blocked to In progress in Release 5.0.0 Nov 13, 2024
@QU3B1M
Copy link
Member

QU3B1M commented Nov 13, 2024

All the event_generators were updated with the latest changes on the indices applied on master

@wazuhci wazuhci moved this from In progress to Pending review in Release 5.0.0 Nov 13, 2024
@wazuhci wazuhci moved this from Pending review to In final review in Release 5.0.0 Nov 15, 2024
@wazuhci wazuhci moved this from In final review to Done in Release 5.0.0 Nov 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
level/task Task issue mvp Minimum Viable Product request/operational Operational requests type/enhancement Enhancement issue
Projects
Status: Done
2 participants