Commits on Jul 8, 2020

1. [Filebeat] Improve ECS categorization field mappings for azure module (… …

   …elastic#19376)
   
   * Improve ECS categorization field mappings in azure module
   
   - activitylogs
     + convert pipeline to yml
     + add azure.activitylogs.result_type
     + set default_field: false
     + populate event.outcome with allowed values
     + set event.action
     + populate event.category with allowed values
     + set event.kind
     + set event.type
     + add support tickets example
     + add geoip for source.ip
     + add AS info for source.ip
     + add user.name
     + add user.full_name
     + add user.domain
     + update dashboards
   - auditlogs
     + convert pipeline to yml
     + set default_field: false
     + add azure.auditlogs.category
     + populate event.outcome with allowed values
     + set event.action
     + set event.kind
     + update dashboards
   - signinlogs
     + convert pipeline to yml
     + set default_field: false
     + set event.action
     + populate event.category with allowed values
     + set event.type
     + populate event.outcome with allowed values
     + add azure.signinlogs.category
     + add azure.signinlogs.result_type
     + set user.name
     + set user.domain
     + set user.full_name
     + set user.id
     + add geoip for source.ip
     + add AS info for source.ip
     + update dashboards
   
   Closes elastic#16155
   
   (cherry picked from commit 00a274e)

   

   leehinman committed Jul 8, 2020
   Configuration menu

   • View commit details
   • Copy full SHA for 40eed97
   • Browse repository at this point

   Copy the full SHA

   40eed97 View commit details

   Browse the repository at this point in the history