Skip to content

[zscaler_zpa] Add ZScaler ZPA package. - #2458

Merged
andrewkroh merged 6 commits into
elastic:mainfrom
vinit-chauhan:package_zscaler_zpa
Feb 14, 2022
Merged

andrewkroh merged 6 commits into
elastic:mainfrom
vinit-chauhan:package_zscaler_zpa

Conversation

@vinit-chauhan

Copy link
Copy Markdown
Contributor

What does this PR do?

  • Generated the skeleton of the ZScaler ZPA integration package.
  • Added 5 data streams (App connector status, Audit, Browser access, User activity. and User status).
  • Added data collection logic for all 5 data streams.
  • Added the ingest pipeline for all the data streams.
  • Mapped fields according to the ECS schema and added Fields metadata in the appropriate yml files
  • Added dashboards and visualizations.
  • Added test for pipeline for all the data streams.
  • Added system test cases for all the data streams.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • If I'm introducing a new feature, I have modified the Kibana version constraint in my package's manifest.yml file to point to the latest Elastic stack release (e.g. ^7.16.2).

How to test this PR locally

  • Clone integrations repo.
  • Install elastic-package locally.
  • Start elastic stack using elastic-package.
  • Move to integrations/packages/zscaler_zpa directory.
  • Run the following command to run tests.

elastic-package test

Screenshots

image
image
image
image

@elasticmachine

elasticmachine commented Jan 3, 2022 •

Copy link
Copy Markdown

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS
Pipeline View Test View Changes Artifacts preview preview

Expand to view the summary

Build stats

  • Start Time: 2022-02-14T12:32:12.269+0000

  • Duration: 22 min 11 sec

Test stats 🧪

Test Results
Failed 0
Passed 59
Skipped 0
Total 59

🤖 GitHub comments

To re-run your PR in the CI, just comment with:

  • /test : Re-trigger the build.

@vinit-chauhan
vinit-chauhan marked this pull request as ready for review January 6, 2022 13:58
@elasticmachine

Copy link
Copy Markdown

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

@efd6

efd6 commented Jan 9, 2022

Copy link
Copy Markdown
Contributor

/test

@jamiehynds jamiehynds linked an issue Jan 12, 2022 that may be closed by this pull request
15 tasks
@marc-gr

marc-gr commented Jan 25, 2022

Copy link
Copy Markdown
Contributor

/test

@andrewkroh andrewkroh left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks very good. Just a few minor suggestions.

Comment thread packages/zscaler_zpa/data_stream/app_connector_status/fields/ecs.yml Outdated
Comment thread packages/zscaler_zpa/data_stream/app_connector_status/manifest.yml Outdated
Comment thread packages/zscaler_zpa/data_stream/user_status/fields/fields.yml
Comment thread packages/zscaler_zpa/_dev/deploy/docker/sample_logs/app_connector_status.log Outdated
- Removed dynamic_fields section from pipeline tests
- Removed level parameter from ecs.yml
- Changed the type of IP fields from keyword to ip.
- Changed the type of date fields from keyword to date.
- Added new line for log files.
- Re-generated pipeline test expacted files.
- Updated ecs version to 8.0.0
@andrewkroh

Copy link
Copy Markdown
Contributor

/test

Comment thread packages/zscaler_zpa/manifest.yml
Comment thread packages/zscaler_zpa/data_stream/app_connector_status/manifest.yml Outdated
@andrewkroh
andrewkroh merged commit 297e43c into elastic:main Feb 14, 2022
@andrewkroh andrewkroh added the New Integration Issue or pull request for creating a new integration package. label Aug 13, 2024
@vinit-chauhan
vinit-chauhan deleted the package_zscaler_zpa branch April 1, 2026 23:57
orestisfl pushed a commit to orestisfl/integrations that referenced this pull request May 15, 2026
This integration is for Zscaler Private Access logs. It can be used
to receive logs sent by LSS Log Receiver on respective TCP ports.

- Generated the skeleton of the ZScaler ZPA integration package.
- Added 5 data streams (App connector status, Audit, Browser access, User activity. and User status).
- Added data collection logic for all 5 data streams.
- Added the ingest pipeline for all the data streams.
- Mapped fields according to the ECS schema and added Fields metadata in the appropriate yml files
- Added dashboards and visualizations.
- Added test for pipeline for all the data streams.
- Added system test cases for all the data streams.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Integration:zscaler_zpa Zscaler Private Access New Integration Issue or pull request for creating a new integration package.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Zscaler Private Access

5 participants