Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

New input for Office 365 audit logs #16244

Merged
merged 20 commits into from
Mar 5, 2020
Merged

New input for Office 365 audit logs #16244

merged 20 commits into from
Mar 5, 2020

Commits on Mar 3, 2020

  1. [SIEM] New o365 input for Office 365 audit logs 

    This input uses Microsoft's Office 365 Management API to fetch audit
events.

Relates elastic#16196
    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    5150c54 View commit details
    Browse the repository at this point in the history

  2. Improve error handling

    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    bdb0ddb View commit details
    Browse the repository at this point in the history

  3. Fix initial query failure when queued for a long time. 

    If the first query list_blobs(now-7d,now-6d) is queued for more than 1h
(because of service unavailable errors for example), when it finally
runs it falls outside the acceptable time-range for the server,
resulting in a AF20030 error.
    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    1a7df99 View commit details
    Browse the repository at this point in the history

  4. Removed extra debug

    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    90f62bc View commit details
    Browse the repository at this point in the history

  5. Better handling of network errors

    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    30ebd24 View commit details
    Browse the repository at this point in the history

  6. Add support for client secret authentication

    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    3b6e221 View commit details
    Browse the repository at this point in the history

  7. Improved config error handling

    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    d3ef9e9 View commit details
    Browse the repository at this point in the history

  8. mage fmt

    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    bb5251b View commit details
    Browse the repository at this point in the history

  9. Minor date change

    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    487d540 View commit details
    Browse the repository at this point in the history

  10. Set document ID from audit record ID.

    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    837012c View commit details
    Browse the repository at this point in the history

  11. Make input less noisy when backend is down

    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    44a5400 View commit details
    Browse the repository at this point in the history

  12. Set event.kind:pipeline_error on errors

    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    99e2857 View commit details
    Browse the repository at this point in the history

  13. Simplify some settings

    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    61b4e18 View commit details
    Browse the repository at this point in the history

  14. Rename live_window_poll_interval to poll_interval.

    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    4c2f5ee View commit details
    Browse the repository at this point in the history

  15. o365audit input docs.

    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    336450b View commit details
    Browse the repository at this point in the history

  16. Review comments

    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    629fbec View commit details
    Browse the repository at this point in the history

  17. Address review comments

    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    6079341 View commit details
    Browse the repository at this point in the history

  18. Adapt to go modules

    @adriansr
    adriansr committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    49c0f0b View commit details
    Browse the repository at this point in the history

Commits on Mar 4, 2020

  1. CHANGELOG entry

    @adriansr
    adriansr committed Mar 4, 2020
    Configuration menu
    Copy the full SHA
    56f04b5 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'master' into feature_o365_input

    @adriansr
    adriansr authored Mar 4, 2020
    Configuration menu
    Copy the full SHA
    332df89 View commit details
    Browse the repository at this point in the history