Skip to content

[sysdig] Add support for security event datastream - #13626

Merged
efd6 merged 8 commits into
elastic:mainfrom
brijesh-elastic:sysdig-0.4.0
May 27, 2025
Merged

efd6 merged 8 commits into
elastic:mainfrom
brijesh-elastic:sysdig-0.4.0

Conversation

@brijesh-elastic

Copy link
Copy Markdown
Contributor

Proposed commit message

sysdig: add support for security event datastream.

This security events logs provides an overview of your infrastructure,
and allows you to deep-dive into specific security events, distinguish,
false positives, and configure policies to enhance performance.

Sanitized test case inputs were obtained from live Sysdig Secure instance
using the Sysdig Next Gen API.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

  • Clone integrations repo.
  • Install elastic package locally.
  • Start elastic stack using elastic-package.
  • Move to integrations/packages/sysdig directory.
  • Run the following command to run tests.

elastic-package test

Related issues

Screenshots

Security Event Dashboard

@brijesh-elastic brijesh-elastic added enhancement New feature or request Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Integration:sysdig Sysdig Team:SDE-Crest Crest developers on the Security Integrations team [elastic/sit-crest-contractors] labels Apr 21, 2025
@brijesh-elastic brijesh-elastic self-assigned this Apr 21, 2025
@brijesh-elastic
brijesh-elastic requested a review from a team as a code owner April 21, 2025 13:50
@elasticmachine

Copy link
Copy Markdown

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@elastic-vault-github-plugin-prod

Copy link
Copy Markdown
Contributor

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@andrewkroh andrewkroh added the dashboard Relates to a Kibana dashboard bug, enhancement, or modification. label Apr 21, 2025
@brijesh-elastic
brijesh-elastic requested review from efd6 and kcreddy May 15, 2025 21:02

@kcreddy kcreddy left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Please wait for @efd6 approval.

@efd6 efd6 left a comment •

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please address

@brijesh-elastic
brijesh-elastic requested a review from efd6 May 19, 2025 08:57
@brijesh-elastic
brijesh-elastic requested a review from efd6 May 21, 2025 09:23
@brijesh-elastic
brijesh-elastic requested a review from kcreddy May 26, 2025 06:09
@elasticmachine

Copy link
Copy Markdown

💚 Build Succeeded

History

cc @brijesh-elastic

@elastic-sonarqube

Copy link
Copy Markdown

@kcreddy kcreddy left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Still LGTM

@efd6 efd6 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks

@efd6
efd6 merged commit 24424bd into elastic:main May 27, 2025
@elastic-vault-github-plugin-prod

Copy link
Copy Markdown
Contributor

Package sysdig - 0.4.0 containing this change is available at https://epr.elastic.co/package/sysdig/0.4.0/

anupratharamachandran pushed a commit to anupratharamachandran/integrations that referenced this pull request Jun 2, 2025
This security events logs provides an overview of your infrastructure,
and allows you to deep-dive into specific security events, distinguish,
false positives, and configure policies to enhance performance.

Sanitized test case inputs were obtained from live Sysdig Secure instance
using the Sysdig Next Gen API.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dashboard Relates to a Kibana dashboard bug, enhancement, or modification. enhancement New feature or request Integration:sysdig Sysdig Team:SDE-Crest Crest developers on the Security Integrations team [elastic/sit-crest-contractors] Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Sysdig Secure] New data stream: Runtime Threat Detection

5 participants