Repository navigation
[zscaler_zpa] Add ZScaler ZPA package. - #2458
Merged
Merged
Conversation
vinit-chauhan
force-pushed
the
package_zscaler_zpa
branch
from
January 3, 2022 09:59
061e2df to
8105a9d
Compare
vinit-chauhan
marked this pull request as ready for review
January 6, 2022 13:58
|
Pinging @elastic/security-external-integrations (Team:Security-External Integrations) |
Contributor
|
/test |
Closed
15 tasks
- Corrected the case in vendor name
Contributor
|
/test |
andrewkroh
reviewed
Jan 27, 2022
andrewkroh
left a comment
Contributor
There was a problem hiding this comment.
Looks very good. Just a few minor suggestions.
efd6
reviewed
Feb 1, 2022
- Removed dynamic_fields section from pipeline tests - Removed level parameter from ecs.yml - Changed the type of IP fields from keyword to ip. - Changed the type of date fields from keyword to date. - Added new line for log files. - Re-generated pipeline test expacted files. - Updated ecs version to 8.0.0
Contributor
|
/test |
efd6
approved these changes
Feb 10, 2022
andrewkroh
reviewed
Feb 10, 2022
andrewkroh
approved these changes
Feb 14, 2022
This was referenced Feb 16, 2022
orestisfl
pushed a commit
to orestisfl/integrations
that referenced
this pull request
May 15, 2026
This integration is for Zscaler Private Access logs. It can be used to receive logs sent by LSS Log Receiver on respective TCP ports. - Generated the skeleton of the ZScaler ZPA integration package. - Added 5 data streams (App connector status, Audit, Browser access, User activity. and User status). - Added data collection logic for all 5 data streams. - Added the ingest pipeline for all the data streams. - Mapped fields according to the ECS schema and added Fields metadata in the appropriate yml files - Added dashboards and visualizations. - Added test for pipeline for all the data streams. - Added system test cases for all the data streams.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What does this PR do?
Checklist
changelog.ymlfile.manifest.ymlfile to point to the latest Elastic stack release (e.g.^7.16.2).How to test this PR locally
Screenshots