[zeek] Make zeek package GA with v1.0.0

packages/zeek/changelog.yml

@@ -1,4 +1,12 @@
 # newer versions go on top
+- version: "1.0.0"
+ changes:
+ - description: make GA
+ type: enhancement
+ link: https://github.com/elastic/integrations/pull/1217
+ - description: Set "event.module" and "event.dataset"
+ type: enhancement
+ link: https://github.com/elastic/integrations/pull/1217
 - version: "0.8.4"
  changes:
  - description: Add support for Splunk authorization tokens

packages/zeek/data_stream/capture_loss/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.capture_loss
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/capture_loss/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek capture_loss logs
-release: experimental
 streams:
  - input: logfile
  vars:

packages/zeek/data_stream/connection/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.connection
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/connection/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek connection logs
-release: experimental
 streams:
  - input: logfile
  template_path: log.yml.hbs

packages/zeek/data_stream/dce_rpc/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.dce_rpc
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/dce_rpc/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek dce_rpc logs
-release: experimental
 streams:
  - input: logfile
  vars:

packages/zeek/data_stream/dhcp/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.dhcp
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/dhcp/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek dhcp logs
-release: experimental
 streams:
  - input: logfile
  vars:

packages/zeek/data_stream/dnp3/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.dnp3
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/dnp3/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek dnp3 logs
-release: experimental
 streams:
  - input: logfile
  vars:

packages/zeek/data_stream/dns/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.dns
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/dns/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek dns logs
-release: experimental
 streams:
  - input: logfile
  vars:

packages/zeek/data_stream/dpd/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.dpd
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/dpd/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek dpd logs
-release: experimental
 streams:
  - input: logfile
  vars:

packages/zeek/data_stream/files/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.files
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/files/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek files logs
-release: experimental
 streams:
  - input: logfile
  vars:

packages/zeek/data_stream/ftp/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.ftp
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/ftp/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek ftp logs
-release: experimental
 streams:
  - input: logfile
  vars:

packages/zeek/data_stream/http/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.http
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/http/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek http logs
-release: experimental
 streams:
  - input: logfile
  vars:

packages/zeek/data_stream/intel/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.intel
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/intel/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek intel logs
-release: experimental
 streams:
  - input: logfile
  vars:

packages/zeek/data_stream/irc/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.irc
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/irc/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek irc logs
-release: experimental
 streams:
  - input: logfile
  vars:

packages/zeek/data_stream/kerberos/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.kerberos
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/kerberos/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek kerberos logs
-release: experimental
 streams:
  - input: logfile
  vars:

packages/zeek/data_stream/modbus/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.modbus
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/modbus/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek modbus logs
-release: experimental
 streams:
  - input: logfile
  vars:

packages/zeek/data_stream/mysql/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.mysql
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/mysql/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek mysql logs
-release: experimental
 streams:
  - input: logfile
  vars:

packages/zeek/data_stream/notice/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.notice
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/notice/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek notice logs
-release: experimental
 streams:
  - input: logfile
  vars:

packages/zeek/data_stream/ntlm/fields/base-fields.yml

@@ -7,6 +7,14 @@
 - name: data_stream.namespace
  type: constant_keyword
  description: Data stream namespace.
+- name: event.module
+ type: constant_keyword
+ description: Event module
+ value: zeek
+- name: event.dataset
+ type: constant_keyword
+ description: Event dataset
+ value: zeek.ntlm
 - name: '@timestamp'
  type: date
  description: Event timestamp.

packages/zeek/data_stream/ntlm/manifest.yml

@@ -1,6 +1,5 @@
 type: logs
 title: Zeek ntlm logs
-release: experimental
 streams:
  - input: logfile
  vars: