ti_threatconnect: add query to base dashboard to avoid duplicates and update label #12106
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
efd6 reviewed Dec 15, 2024
...ti_threatconnect/kibana/dashboard/ti_threatconnect-2d465f90-973d-11ee-839e-ef65b7014120.json Outdated Show resolved Hide resolved
GShepherdTC commented Dec 16, 2024
Contributor Author
GShepherdTC left a comment
GShepherdTC left a comment There was a problem hiding this comment.
Thanks as always for the review.
GShepherdTC commented Dec 16, 2024
Contributor Author
GShepherdTC left a comment
GShepherdTC left a comment There was a problem hiding this comment.
Thanks for the review.
efd6 changed the title 
andrewkroh added dashboard 
| Pinging @elastic/security-service-integrations (Team:Security-Service Integrations) |
Contributor
| /test |
🚀 Benchmarks reportTo see the full report comment with |
Member
| /test |
andrewkroh approved these changes Jan 3, 2025
💚 Build Succeeded
History
|
|
| Package ti_threatconnect - 1.7.0 containing this change is available at https://epr.elastic.co/package/ti_threatconnect/1.7.0/ |
harnish-crest-data pushed a commit to chavdaharnish/integrations that referenced this pull request Feb 4, 2025
…#12106) Updated the base query to only use the latest index so indicators are not counted twice for all the panels in the dashboard. Updated one visualization label to show its unique indicators being counted.
harnish-crest-data pushed a commit to chavdaharnish/integrations that referenced this pull request Feb 5, 2025
…#12106) Updated the base query to only use the latest index so indicators are not counted twice for all the panels in the dashboard. Updated one visualization label to show its unique indicators being counted.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit. This suggestion is invalid because no changes were made to the code. Suggestions cannot be applied while the pull request is closed. Suggestions cannot be applied while viewing a subset of changes. Only one suggestion per line can be applied in a batch. Add this suggestion to a batch that can be applied as a single commit. Applying suggestions on deleted lines is not supported. You must change the existing code in this line in order to create a valid suggestion. Outdated suggestions cannot be applied. This suggestion has been applied or marked resolved. Suggestions cannot be applied from pending reviews. Suggestions cannot be applied on multi-line comments. Suggestions cannot be applied while the pull request is queued to merge. Suggestion cannot be applied right now. Please check back later.
Proposed commit message
Updated the base query to include the latest index so indicators are not counted twice for all the
panels in the dashboard. Updated 1 label to show its unique indicators being counted.
Checklist
changelog.ymlfile.Author's Checklist
How to test this PR locally
Run the integration and view the dashboard is reflecting correct counts now.
Related issues
Screenshots