Commits on Sep 7, 2021

1. [Filebeat] Threatintel compatibility updates (#27323) …

   * First pass on updating filebeat threatintel logic for ECS 1.11
   
   This only covers modules starting with an a; the rest will follow
   shortly. In general, these changes address the following goals:
   
   * preference for indicator.url.domain, and deprecation of
     indicator.domain
   * moving from event.reference to indicator.reference
   
   * Move remaining modules from indicator.domain -> indicator.url.domain
   
   Along with conditional checks to ensure we're not overwriting the
   relevant uri_parts data from earlier in the pipeline.
   
   * Update indicator.reference in relevant modules
   
   * Fix missing prefix in target field
   
   * linting and apply new testfiles
   
   * Run `make update` in filebeat
   
   * fixing duplicate fields
   
   * mage fmt update
   
   * linting
   
   Co-authored-by: Marius Iversen <[email protected]>
   (cherry picked from commit 4be2694)
   
   # Conflicts:
   #	x-pack/filebeat/module/threatintel/abuseurl/ingest/pipeline.yml
   #	x-pack/filebeat/module/threatintel/anomali/ingest/pipeline.yml

   

   rylnd authored and mergify-bot committed Sep 7, 2021
   Configuration menu

   • View commit details
   • Copy full SHA for ff62211
   • Browse repository at this point

   Copy the full SHA

   ff62211 View commit details

   Browse the repository at this point in the history

2. fixing mergify conflicts

   

   P1llus committed Sep 7, 2021
   Configuration menu

   • View commit details
   • Copy full SHA for ed2c06c
   • Browse repository at this point

   Copy the full SHA

   ed2c06c View commit details

   Browse the repository at this point in the history