elastic / elastic/integrations

[Cisco Umbrella] Expand tests coverage for log schema version v13

Open
#15,843 1 comment 0 reactions 0 assignees View on GitHub
enhancement Integration:cisco_umbrella Team:Security-Service Integrations
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
3d 4h
Merged PRs (30d)
209

Description

Support for log schema version v13 was added in in https://github.com/elastic/integrations/pull/15791.
The sample logs used in the pipeline tests are taken from the official Cisco Umbrella documentation:
https://docs.umbrella.com/umbrella-user-guide/docs/log-format-and-versioning

Some of these samples are missing certain field values. As a result those fields remain untested.
This issue serves as a reminder of this testing gap and to track the addition of more comprehensive tests once logs with complete field data become available from a live instance.

The following log types need to be added in the pipeline tests:
- Cloud Firewall Logs
- Intrusion Logs (IPS Logs)
- DLP Logs

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.