Commits on Aug 19, 2020

1. Sync with zeek package …

   - connection
     + remove redundant source.ip & destination.ip mapping
     + add null check for append to related.ip
     + remove duplicate setting of event.kind & event.category
   - dce_rpc
     + add null check for append to related.ip
   - dnp3
     + add append to related.ip
   - dns
     + move conversion of zeek.dns.ts to @timestamp to ingest pipeline
     + add event.created to ingest pipeline
   - intel
     + move conversion of zeek.intel.ts to @timestamp to ingest pipeline
   - socks
     + change processor for event.outcome from append to set
   - ssl
     + fix so event.type is correctly set
     + fix quoting of = in ingest pipeline
   - x509
     + convert pipeline to yaml format

   

   leehinman committed Aug 19, 2020
   Configuration menu

   • View commit details
   • Copy full SHA for 22aeb09
   • Browse repository at this point

   Copy the full SHA

   22aeb09 View commit details

   Browse the repository at this point in the history