Skip to content

Commit e252e30

Browse files
[Checkpoint Email] Add agentless deployment (#15450)
1 parent 9e09eb3 commit e252e30

File tree

5 files changed

+39
-3
lines changed

5 files changed

+39
-3
lines changed

packages/checkpoint_email/_dev/build/docs/README.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,12 @@ Check Point's [Harmony Email & Collaboration](https://www.checkpoint.com/harmony
44

55
The Check Point Harmony Email & Collaboration integration collects security event logs using REST API.
66

7+
## Agentless Enabled Integration
8+
9+
Agentless integrations allow you to collect data without having to manage Elastic Agent in your cloud. They make manual agent deployment unnecessary, so you can focus on your data instead of the agent that collects it. For more information, refer to [Agentless integrations](https://www.elastic.co/guide/en/serverless/current/security-agentless-integrations.html) and the [Agentless integrations FAQ](https://www.elastic.co/guide/en/serverless/current/agentless-integration-troubleshooting.html).
10+
11+
Agentless deployments are only supported in Elastic Serverless and Elastic Cloud environments. This functionality is in beta and is subject to change. Beta features are not subject to the support SLA of official GA features.
12+
713
## Data streams
814

915
This integration collects the following logs:

packages/checkpoint_email/changelog.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,9 @@
11
# newer versions go on top
2+
- version: "1.3.0"
3+
changes:
4+
- description: Enable Agentless deployment.
5+
type: enhancement
6+
link: https://github.com/elastic/integrations/pull/15450
27
- version: "1.2.0"
38
changes:
49
- description: Populate additional ECS fields for the event types `phishing`, `spam`, and `malicious_url`.

packages/checkpoint_email/data_stream/event/elasticsearch/ingest_pipeline/default.yml

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,17 @@ processors:
55
field: ecs.version
66
tag: set_ecs_version
77
value: 8.17.0
8+
- remove:
9+
field:
10+
- organization
11+
- division
12+
- team
13+
ignore_missing: true
14+
if: ctx.organization instanceof String && ctx.division instanceof String && ctx.team instanceof String
15+
tag: remove_agentless_tags
16+
description: >-
17+
Removes the fields added by Agentless as metadata,
18+
as they can collide with ECS fields.
819
- terminate:
920
tag: data_collection_error
1021
if: ctx.error?.message != null && ctx.message == null && ctx.event?.original == null

packages/checkpoint_email/docs/README.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,12 @@ Check Point's [Harmony Email & Collaboration](https://www.checkpoint.com/harmony
44

55
The Check Point Harmony Email & Collaboration integration collects security event logs using REST API.
66

7+
## Agentless Enabled Integration
8+
9+
Agentless integrations allow you to collect data without having to manage Elastic Agent in your cloud. They make manual agent deployment unnecessary, so you can focus on your data instead of the agent that collects it. For more information, refer to [Agentless integrations](https://www.elastic.co/guide/en/serverless/current/security-agentless-integrations.html) and the [Agentless integrations FAQ](https://www.elastic.co/guide/en/serverless/current/agentless-integration-troubleshooting.html).
10+
11+
Agentless deployments are only supported in Elastic Serverless and Elastic Cloud environments. This functionality is in beta and is subject to change. Beta features are not subject to the support SLA of official GA features.
12+
713
## Data streams
814

915
This integration collects the following logs:

packages/checkpoint_email/manifest.yml

Lines changed: 11 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
1-
format_version: 3.4.0
1+
format_version: 3.3.2
22
name: checkpoint_email
33
title: Check Point Harmony Email & Collaboration
4-
version: "1.2.0"
4+
version: "1.3.0"
55
description: Collect logs from Check Point Harmony Email & Collaboration with Elastic Agent.
66
type: integration
77
categories:
@@ -10,7 +10,7 @@ categories:
1010
- email_security
1111
conditions:
1212
kibana:
13-
version: "^8.16.0 || ^9.0.0"
13+
version: "^8.18.0 || ^9.0.0"
1414
elastic:
1515
subscription: basic
1616
screenshots:
@@ -27,6 +27,14 @@ policy_templates:
2727
- name: checkpoint_email
2828
title: Check Point Harmony Email & Collaboration logs
2929
description: Collect Check Point Harmony Email & Collaboration logs.
30+
deployment_modes:
31+
default:
32+
enabled: true
33+
agentless:
34+
enabled: true
35+
organization: security
36+
division: engineering
37+
team: security-service-integrations
3038
inputs:
3139
- type: cel
3240
title: Collect Check Point Harmony Email & Collaboration logs via API

0 commit comments

Comments
 (0)