Skip to content

[ti_google_threat_intelligence] Resize metric panels on IOC-related dashboards #14763

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Aug 8, 2025
Merged

[ti_google_threat_intelligence] Resize metric panels on IOC-related dashboards #14763

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
9f55ebd
Resize IOC Stream dashboard's matrix visualisation
niraj-crest Jul 31, 2025
ad9ed6d
Update Changelog entry
niraj-crest Jul 31, 2025
674707c
Fix typo
niraj-crest Aug 1, 2025
dcf73b3
update description
niraj-crest Aug 1, 2025
e038a8b
update changelog entry.
niraj-crest Aug 7, 2025
File filter

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions packages/ti_google_threat_intelligence/changelog.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,9 @@
# newer versions go on top
- version: 0.6.1
changes:
- description: Fix the sizes of the metric panels on the two IOC-related dashboards.
type: bugfix
link: https://github.com/elastic/integrations/pull/14763
- version: 0.6.0
changes:
- description: Add data streams - IOC Stream.
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/data_stream/cryptominer/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ program: |
?"query": has(state.query) ? optional.of([state.query]) : optional.none(),
"limit": ["4000"],
"x-tool": ["Elastic"],
"User-Agent": ["v0.6.0"], // Keep this in sync with 'version' in package level manifest.yml.
"User-Agent": ["v0.6.1"], // Keep this in sync with 'version' in package level manifest.yml.
}.format_query()
).with({
"Header": {
Expand Down
2 changes: 1 addition & 1 deletion ...gle_threat_intelligence/data_stream/first_stage_delivery_vectors/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ program: |
?"query": has(state.query) ? optional.of([state.query]) : optional.none(),
"limit": ["4000"],
"x-tool": ["Elastic"],
"User-Agent": ["v0.6.0"], // Keep this in sync with 'version' in package level manifest.yml.
"User-Agent": ["v0.6.1"], // Keep this in sync with 'version' in package level manifest.yml.
}.format_query()
).with({
"Header": {
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/data_stream/infostealer/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ program: |
?"query": has(state.query) ? optional.of([state.query]) : optional.none(),
"limit": ["4000"],
"x-tool": ["Elastic"],
"User-Agent": ["v0.6.0"], // Keep this in sync with 'version' in package level manifest.yml.
"User-Agent": ["v0.6.1"], // Keep this in sync with 'version' in package level manifest.yml.
}.format_query()
).with({
"Header": {
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/data_stream/ioc_stream/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ program: |
"Header": {
"x-apikey": [state.access_token],
"x-tool": ["Elastic"],
"User-Agent": ["v0.6.0"], // Keep this in sync with 'version' in package level manifest.yml.
"User-Agent": ["v0.6.1"], // Keep this in sync with 'version' in package level manifest.yml.
}
}).do_request().as(resp, resp.StatusCode == 200 ?
resp.Body.decode_json().as(body, {
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/data_stream/iot/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ program: |
?"query": has(state.query) ? optional.of([state.query]) : optional.none(),
"limit": ["4000"],
"x-tool": ["Elastic"],
"User-Agent": ["v0.6.0"], // Keep this in sync with 'version' in package level manifest.yml.
"User-Agent": ["v0.6.1"], // Keep this in sync with 'version' in package level manifest.yml.
}.format_query()
).with({
"Header": {
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/data_stream/linux/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ program: |
?"query": has(state.query) ? optional.of([state.query]) : optional.none(),
"limit": ["4000"],
"x-tool": ["Elastic"],
"User-Agent": ["v0.6.0"], // Keep this in sync with 'version' in package level manifest.yml.
"User-Agent": ["v0.6.1"], // Keep this in sync with 'version' in package level manifest.yml.
}.format_query()
).with({
"Header": {
Expand Down
2 changes: 1 addition & 1 deletion ...threat_intelligence/data_stream/malicious_network_infrastructure/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ program: |
?"query": has(state.query) ? optional.of([state.query]) : optional.none(),
"limit": ["4000"],
"x-tool": ["Elastic"],
"User-Agent": ["v0.6.0"], // Keep this in sync with 'version' in package level manifest.yml.
"User-Agent": ["v0.6.1"], // Keep this in sync with 'version' in package level manifest.yml.
}.format_query()
).with({
"Header": {
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/data_stream/malware/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ program: |
?"query": has(state.query) ? optional.of([state.query]) : optional.none(),
"limit": ["4000"],
"x-tool": ["Elastic"],
"User-Agent": ["v0.6.0"], // Keep this in sync with 'version' in package level manifest.yml.
"User-Agent": ["v0.6.1"], // Keep this in sync with 'version' in package level manifest.yml.
}.format_query()
).with({
"Header": {
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/data_stream/mobile/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ program: |
?"query": has(state.query) ? optional.of([state.query]) : optional.none(),
"limit": ["4000"],
"x-tool": ["Elastic"],
"User-Agent": ["v0.6.0"], // Keep this in sync with 'version' in package level manifest.yml.
"User-Agent": ["v0.6.1"], // Keep this in sync with 'version' in package level manifest.yml.
}.format_query()
).with({
"Header": {
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/data_stream/osx/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ program: |
?"query": has(state.query) ? optional.of([state.query]) : optional.none(),
"limit": ["4000"],
"x-tool": ["Elastic"],
"User-Agent": ["v0.6.0"], // Keep this in sync with 'version' in package level manifest.yml.
"User-Agent": ["v0.6.1"], // Keep this in sync with 'version' in package level manifest.yml.
}.format_query()
).with({
"Header": {
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/data_stream/phishing/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ program: |
?"query": has(state.query) ? optional.of([state.query]) : optional.none(),
"limit": ["4000"],
"x-tool": ["Elastic"],
"User-Agent": ["v0.6.0"], // Keep this in sync with 'version' in package level manifest.yml.
"User-Agent": ["v0.6.1"], // Keep this in sync with 'version' in package level manifest.yml.
}.format_query()
).with({
"Header": {
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/data_stream/ransomware/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ program: |
?"query": has(state.query) ? optional.of([state.query]) : optional.none(),
"limit": ["4000"],
"x-tool": ["Elastic"],
"User-Agent": ["v0.6.0"], // Keep this in sync with 'version' in package level manifest.yml.
"User-Agent": ["v0.6.1"], // Keep this in sync with 'version' in package level manifest.yml.
}.format_query()
).with({
"Header": {
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/data_stream/threat_actor/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ program: |
?"query": has(state.query) ? optional.of([state.query]) : optional.none(),
"limit": ["4000"],
"x-tool": ["Elastic"],
"User-Agent": ["v0.6.0"], // Keep this in sync with 'version' in package level manifest.yml.
"User-Agent": ["v0.6.1"], // Keep this in sync with 'version' in package level manifest.yml.
}.format_query()
).with({
"Header": {
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/data_stream/trending/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ program: |
?"query": has(state.query) ? optional.of([state.query]) : optional.none(),
"limit": ["4000"],
"x-tool": ["Elastic"],
"User-Agent": ["v0.6.0"], // Keep this in sync with 'version' in package level manifest.yml.
"User-Agent": ["v0.6.1"], // Keep this in sync with 'version' in package level manifest.yml.
}.format_query()
).with({
"Header": {
Expand Down
2 changes: 1 addition & 1 deletion ...ogle_threat_intelligence/data_stream/vulnerability_weaponization/agent/stream/cel.yml.hbs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ program: |
?"query": has(state.query) ? optional.of([state.query]) : optional.none(),
"limit": ["4000"],
"x-tool": ["Elastic"],
"User-Agent": ["v0.6.0"], // Keep this in sync with 'version' in package level manifest.yml.
"User-Agent": ["v0.6.1"], // Keep this in sync with 'version' in package level manifest.yml.
}.format_query()
).with({
"Header": {
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/elasticsearch/transform/domain_ioc/transform.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@ _meta:
managed: false
# Bump this version to delete, reinstall, and restart the transform during
# package installation.
fleet_transform_version: 0.6.0
fleet_transform_version: 0.6.1
# We are currently using multiple source indices in this transform because system tests do not support
# executing queries defined within the transform. This causes test failures, so we've raised the issue here:
# https://github.com/elastic/elastic-package/issues/2676
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/elasticsearch/transform/domain_ioc_st/transform.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,5 +41,5 @@ _meta:
managed: false
# Bump this version to delete, reinstall, and restart the transform during
# package installation.
fleet_transform_version: 0.6.0
fleet_transform_version: 0.6.1
run_as_kibana_system: false
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/elasticsearch/transform/file_ioc/transform.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@ _meta:
managed: false
# Bump this version to delete, reinstall, and restart the transform during
# package installation.
fleet_transform_version: 0.6.0
fleet_transform_version: 0.6.1
# We are currently using multiple source indices in this transform because system tests do not support
# executing queries defined within the transform. This causes test failures, so we've raised the issue here:
# https://github.com/elastic/elastic-package/issues/2676
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/elasticsearch/transform/file_ioc_st/transform.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,5 +41,5 @@ _meta:
managed: false
# Bump this version to delete, reinstall, and restart the transform during
# package installation.
fleet_transform_version: 0.6.0
fleet_transform_version: 0.6.1
run_as_kibana_system: false
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/elasticsearch/transform/ip_ioc/transform.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@ _meta:
managed: false
# Bump this version to delete, reinstall, and restart the transform during
# package installation.
fleet_transform_version: 0.6.0
fleet_transform_version: 0.6.1
# We are currently using multiple source indices in this transform because system tests do not support
# executing queries defined within the transform. This causes test failures, so we've raised the issue here:
# https://github.com/elastic/elastic-package/issues/2676
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/elasticsearch/transform/ip_ioc_st/transform.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,5 +41,5 @@ _meta:
managed: false
# Bump this version to delete, reinstall, and restart the transform during
# package installation.
fleet_transform_version: 0.6.0
fleet_transform_version: 0.6.1
run_as_kibana_system: false
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/elasticsearch/transform/rule/transform.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,5 +42,5 @@ _meta:
managed: false
# Bump this version to delete, reinstall, and restart the transform during
# package installation.
fleet_transform_version: 0.6.0
fleet_transform_version: 0.6.1
run_as_kibana_system: false
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/elasticsearch/transform/rule_ioc_st/transform.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,5 +41,5 @@ _meta:
managed: false
# Bump this version to delete, reinstall, and restart the transform during
# package installation.
fleet_transform_version: 0.6.0
fleet_transform_version: 0.6.1
run_as_kibana_system: false
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/elasticsearch/transform/url_ioc/transform.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@ _meta:
managed: false
# Bump this version to delete, reinstall, and restart the transform during
# package installation.
fleet_transform_version: 0.6.0
fleet_transform_version: 0.6.1
# We are currently using multiple source indices in this transform because system tests do not support
# executing queries defined within the transform. This causes test failures, so we've raised the issue here:
# https://github.com/elastic/elastic-package/issues/2676
Expand Down
2 changes: 1 addition & 1 deletion packages/ti_google_threat_intelligence/elasticsearch/transform/url_ioc_st/transform.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,5 +41,5 @@ _meta:
managed: false
# Bump this version to delete, reinstall, and restart the transform during
# package installation.
fleet_transform_version: 0.6.0
fleet_transform_version: 0.6.1
run_as_kibana_system: false
Binary file modified packages/ti_google_threat_intelligence/img/ioc_stream_overview_dashboard.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified .../ti_google_threat_intelligence/img/ioc_stream_threat_intelligence_dashboard.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading