Integration release checklist

The Elastic Security integration will ingest elastic security alerts from different es instances.

Integration name: Elastic Security
Data streams: alert
Input: CEL

We can collect the data using ES apis ingesting .internal.alerts-security.alerts-default-.. indices or kibana api https://www.elastic.co/docs/api/doc/kibana/operation/operation-searchalerts

Dashboard ideas:

• TO DO

All changes

• Change follows the contributing guidelines
• Supported versions of the monitoring target are documented
• Supported operating systems are documented (if applicable)
• Integration or System tests exist
• Documentation exists, useful guidelines to follow
• Fields follow ECS and naming conventions
• At least a manual test with ES / Kibana / Agent has been performed.
• Required Kibana version set to: