elastic / elastic/integrations

[33 integrations] Downgrade format_version if possible

Open
#15,147 9 comments 0 reactions 0 assignees View on GitHub
bug Integration:abnormal_security Integration:authentik Integration:carbon_black_cloud Integration:checkpoint_email Integration:claroty_ctd Integration:first_epss Integration:imperva_cloud_waf Integration:microsoft_sentinel Integration:mimecast Integration:servicenow Integration:spycloud Integration:statsd_input Integration:sublime_security Integration:sysdig Integration:ti_custom Integration:ti_recordedfuture Integration:wiz Team:obs-ds-hosted-services Team:Security-Service Integrations
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
3d 4h
Merged PRs (30d)
209

Description

The listed integrations use (packapge spec) `format_version: 3.4.0`, so they are not available in Kibana 9.0.x.

They should be downgraded to a 3.X.X version unless they require functionality in package-spec 3.4.0.

### Related resources

* `elastic-package` README [sections](https://github.com/elastic/package-spec/?tab=readme-ov-file#version-compatibility-between-packages-and-specifications) regarding version compatibility
* [Guidelines for the format version to use in a package](https://github.com/elastic/elastic-package/blob/main/docs/howto/format_version.md)
* PR https://github.com/elastic/elastic-package/pull/2867 updates that to be consistent with the advice:
> It is actually recommended to use the minimum spec version that support all the features that the package needs.

### Integrations

- [x] `abnormal_security`
- [x] `armis`
- [x] `authentik`
- [x] `beyondinsight_password_safe`
- [x] `beyondtrust_pra`
- [x] `carbon_black_cloud` https://github.com/elastic/integrations/pull/15220
- [x] `checkpoint_email` https://github.com/elastic/integrations/pull/15450
- [x] `claroty_ctd`
- [x] `claroty_xdome`
- [x] `cyberark_epm`
- [x] ~`docker_otel`~ Change redundant since the integration only supports stack version `^9.2.0`
- [x] `extrahop`
- [x] `first_epss`
- [x] `google_secops`
- [x] `imperva_cloud_waf`
- [x] `microsoft_sentinel`
- [x] `mimecast` https://github.com/elastic/integrations/pull/15220
- [x] `nozomi_networks`
- [x] `proofpoint_itm`
- [x] `qualys_gav`
- [ ] `security_ai_prompts`
- [x] `servicenow`
- [x] `splunk`
- [x] `spycloud`
- [x] `statsd_input` https://github.com/elastic/integrations/pull/15125
- [x] `sublime_security`
- [x] `sysdig` https://github.com/elastic/integrations/pull/14907
- [ ] `system_otel`
- [x] `ti_custom`
- [x] `ti_domaintools`
- [x] `ti_google_threat_intelligence`
- [x] `ti_greynoise`
- [x] `ti_recordedfuture`
- [x] `vectra_rux`
- [x] `wiz`

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.