Skip to content

Conversation

aleksmaus
Copy link
Contributor

What does this PR do?

Populates host.name field in the beats output documents.

Why is it important?

Addresses: https://github.com/elastic/security-team/issues/3572

Checklist

  • My code follows the style guidelines of this project
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation

How to test this PR locally

  1. Enroll the agent with osquery_manager integration added to the policy
  2. Run live query, for example select * from osquery_info
  3. Verify that the host.name field exists and is populated with value

Related issues

Screenshots

Screen Shot 2022-05-12 at 1 59 23 PM

@aleksmaus aleksmaus added enhancement backport-v8.3.0 Automated backport with mergify >enhancement labels May 12, 2022
@aleksmaus aleksmaus requested a review from james-elastic May 12, 2022 18:28
@aleksmaus aleksmaus requested a review from a team as a code owner May 12, 2022 18:28
@aleksmaus aleksmaus requested review from kvch and fearful-symmetry and removed request for a team May 12, 2022 18:28
@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label May 12, 2022
@botelastic botelastic bot removed the needs_team Indicates that the issue/PR needs a Team:* label label May 12, 2022
@elasticmachine
Copy link
Collaborator

elasticmachine commented May 12, 2022

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS
Pipeline View Test View Changes Artifacts preview preview

Expand to view the summary

Build stats

  • Start Time: 2022-05-12T18:41:16.491+0000

  • Duration: 45 min 43 sec

Test stats 🧪

Test Results
Failed 0
Passed 1577
Skipped 0
Total 1577

💚 Flaky test report

Tests succeeded.

🤖 GitHub comments

To re-run your PR in the CI, just comment with:

  • /test : Re-trigger the build.

  • /package : Generate the packages and run the E2E tests.

  • /beats-tester : Run the installation tests with beats-tester.

  • run elasticsearch-ci/docs : Re-trigger the docs validation. (use unformatted text in the comment!)

@aleksmaus aleksmaus merged commit db73681 into elastic:main May 12, 2022
chrisberkhout pushed a commit that referenced this pull request Jun 1, 2023
* Osquerybeat: Enable host.name field

* Make linter happy
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants