Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Auditbeat] fim(kprobes): enrich file events by coupling add_process_metadata processor #38716

Closed
wants to merge 27 commits into from
Closed

[Auditbeat] fim(kprobes): enrich file events by coupling add_process_metadata processor #38716

wants to merge 27 commits into from

Commits on Apr 3, 2024

  1. fim(ebpf): enrich file events with process data

    @mmat11 @pkoutsovasilis
    mmat11 authored and pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    0268ead View commit details
    Browse the repository at this point in the history

  2. apply review suggestions

    @mmat11 @pkoutsovasilis
    mmat11 authored and pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    6c8c35a View commit details
    Browse the repository at this point in the history

  3. apply review suggestions

    @mmat11 @pkoutsovasilis
    mmat11 authored and pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    6be066f View commit details
    Browse the repository at this point in the history

  4. fix(fim/ebpf): move process fields to event root and insert them so k… 

    …eys do not contain dots
    @pkoutsovasilis
    pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    d86d697 View commit details
    Browse the repository at this point in the history

  5. fix(fim/ebpf): refactor HostID to utilise sync.OnceValue and expose b… 

    …oot time
    @pkoutsovasilis
    pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    77c219d View commit details
    Browse the repository at this point in the history

  6. fix(fim/ebpf): refactor TicksPerSecond to utilise sync.OnceValue

    @pkoutsovasilis
    pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    3e8f0f1 View commit details
    Browse the repository at this point in the history

  7. fix(fim/ebpf): remove empty slice allocation

    @pkoutsovasilis
    pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    8afd25a View commit details
    Browse the repository at this point in the history

  8. chore: go mod tidy

    @pkoutsovasilis
    pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    2ad2e3f View commit details
    Browse the repository at this point in the history

  9. fix: explicitly set go 1.21.8 in go.mod

    @pkoutsovasilis
    pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    809f28b View commit details
    Browse the repository at this point in the history

  10. fix(fim/ebpf): nil slice of errors in TestNewEventFromEbpfEvent

    @pkoutsovasilis
    pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    e42a105 View commit details
    Browse the repository at this point in the history

  11. fix(fim/ebpf): remove re-declaration of already ecs included fields

    @pkoutsovasilis
    pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    e314478 View commit details
    Browse the repository at this point in the history

  12. fix(fim/ebpf): utilise OnceValues to declutter the code

    @pkoutsovasilis
    pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    0c48c0c View commit details
    Browse the repository at this point in the history

  13. fix(fim/ebpf): remove x-pack import from OSS package

    @pkoutsovasilis
    pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    8b223b1 View commit details
    Browse the repository at this point in the history

  14. fix(fim/ebpf): propagate process fields changes to integration tests

    @pkoutsovasilis
    pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    5a87cee View commit details
    Browse the repository at this point in the history

  15. chore: go mod tidy

    @pkoutsovasilis
    pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    4bd33cf View commit details
    Browse the repository at this point in the history

  16. fim(ebpf): enrich file events with container id

    @mmat11 @pkoutsovasilis
    mmat11 authored and pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    d3d3fb4 View commit details
    Browse the repository at this point in the history

  17. fix(fim/ebpf): make container id event field ecs-compliant

    @pkoutsovasilis
    pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    2a97039 View commit details
    Browse the repository at this point in the history

  18. feat(processors/process_metadata): support reporting group id and name

    @pkoutsovasilis
    pkoutsovasilis committed Apr 3, 2024
    Configuration menu
    Copy the full SHA
    c8e8049 View commit details
    Browse the repository at this point in the history

Commits on Apr 4, 2024

  1. feat(processors/process_metadata): support reporting process entity_id

    @pkoutsovasilis
    pkoutsovasilis committed Apr 4, 2024
    Configuration menu
    Copy the full SHA
    c49464d View commit details
    Browse the repository at this point in the history

  2. feat(fim/kprobes): allow metricsSets to expose beat processors after … 

    …initialisation
    @pkoutsovasilis
    pkoutsovasilis committed Apr 4, 2024
    Configuration menu
    Copy the full SHA
    5d3f439 View commit details
    Browse the repository at this point in the history

  3. doc: update CHANGELOG.next.asciidoc

    @pkoutsovasilis
    pkoutsovasilis committed Apr 4, 2024
    Configuration menu
    Copy the full SHA
    f5bdde1 View commit details
    Browse the repository at this point in the history

  4. fix(linter): SA1015 prevent leaking the ticker

    @pkoutsovasilis
    pkoutsovasilis committed Apr 4, 2024
    Configuration menu
    Copy the full SHA
    28f1e98 View commit details
    Browse the repository at this point in the history

  5. fix(linter): SA1019 mark metricbeat/mb deprecation warnings that are … 

    …not removed yet
    @pkoutsovasilis
    pkoutsovasilis committed Apr 4, 2024
    Configuration menu
    Copy the full SHA
    ba32d5f View commit details
    Browse the repository at this point in the history

  6. fix(linter): check for return err

    @pkoutsovasilis
    pkoutsovasilis committed Apr 4, 2024
    Configuration menu
    Copy the full SHA
    3e0cb87 View commit details
    Browse the repository at this point in the history

  7. fix(linter): prealloc slices

    @pkoutsovasilis
    pkoutsovasilis committed Apr 4, 2024
    Configuration menu
    Copy the full SHA
    fa86800 View commit details
    Browse the repository at this point in the history

  8. fix(linter): remove unused field

    @pkoutsovasilis
    pkoutsovasilis committed Apr 4, 2024
    Configuration menu
    Copy the full SHA
    0b700d8 View commit details
    Browse the repository at this point in the history

  9. fix(linter): G601 prevent implicit memory aliasing in for loop

    @pkoutsovasilis
    pkoutsovasilis committed Apr 4, 2024
    Configuration menu
    Copy the full SHA
    392e265 View commit details
    Browse the repository at this point in the history