Set event.module and event.dataset (#1273)

Author: marc-gr

packages/santa/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "0.2.0"
+ changes:
+ - description: Set "event.module" and "event.dataset"
+ type: enhancement
+ link: https://github.com/elastic/integrations/pull/1273
 - version: "0.1.0"
  changes:
  - description: update to ECS 1.10.0 and adding event.original options

packages/santa/data_stream/log/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: santa
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: santa.log
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/santa/data_stream/log/fields/ecs.yml

@@ -14,11 +14,6 @@
  group: 2
  type: group
  fields:
- - name: dataset
- level: core
- type: keyword
- ignore_above: 1024
- description: 'Name of the dataset.'
  - name: ingested
  level: core
  type: date

packages/santa/docs/README.md

@@ -110,8 +110,9 @@ An example event for `log` looks as following:
 | data_stream.namespace | Data stream namespace. | constant_keyword |
 | data_stream.type | Data stream type. | constant_keyword |
 | ecs.version | ECS version this event conforms to. | keyword |
-| event.dataset | Name of the dataset. | keyword |
+| event.dataset | Event dataset | constant_keyword |
 | event.ingested | Timestamp when an event arrived in the central data store. | date |
+| event.module | Event module | constant_keyword |
 | file.x509.issuer.common_name | List of common name (CN) of issuing certificate authority. | keyword |
 | group.id | Unique identifier for the group on the system/platform. | keyword |
 | group.name | Name of the group. | keyword |

packages/santa/manifest.yml

@@ -1,6 +1,6 @@
 name: santa
 title: Google Santa
-version: 0.1.0
+version: 0.2.0
 release: experimental
 description: Google Santa Integration
 type: integration
@@ -14,7 +14,7 @@ categories:
  - security
  - os_system
 conditions:
- kibana.version: ^7.11.0
+ kibana.version: ^7.14.0
 screenshots:
  - src: /img/kibana-santa-log-overview.png
  title: kibana santa log overview