[Nginx] set event.module and event.dataset (elastic#1234)

* [Nginx] set event.module and event.dataset * Fix
build-security · Jun 30, 2021 · be430ef · be430ef
1 parent c936971
commit be430ef
Show file tree

Hide file tree

Showing 6 changed files with 37 additions and 2 deletions.
diff --git a/packages/nginx/changelog.yml b/packages/nginx/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "0.7.0"
+  changes:
+    - description: Set "event.module" and "event.dataset"
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/1234
 - version: "0.6.2"
   changes:
     - description: Add support for Splunk authorization tokens

diff --git a/packages/nginx/data_stream/access/fields/base-fields.yml b/packages/nginx/data_stream/access/fields/base-fields.yml
@@ -10,3 +10,11 @@
 - name: '@timestamp'
   type: date
   description: Event timestamp.
+- name: event.module
+  type: constant_keyword
+  description: Event module
+  value: nginx
+- name: event.dataset
+  type: constant_keyword
+  description: Event dataset
+  value: nginx.access
diff --git a/packages/nginx/data_stream/error/fields/base-fields.yml b/packages/nginx/data_stream/error/fields/base-fields.yml
@@ -10,3 +10,11 @@
 - name: '@timestamp'
   type: date
   description: Event timestamp.
+- name: event.module
+  type: constant_keyword
+  description: Event module
+  value: nginx
+- name: event.dataset
+  type: constant_keyword
+  description: Event dataset
+  value: nginx.error
diff --git a/packages/nginx/data_stream/stubstatus/fields/base-fields.yml b/packages/nginx/data_stream/stubstatus/fields/base-fields.yml
@@ -10,3 +10,11 @@
 - name: '@timestamp'
   type: date
   description: Event timestamp.
+- name: event.module
+  type: constant_keyword
+  description: Event module
+  value: nginx
+- name: event.dataset
+  type: constant_keyword
+  description: Event dataset
+  value: nginx.stubstatus
diff --git a/packages/nginx/docs/README.md b/packages/nginx/docs/README.md
@@ -163,6 +163,8 @@ An example event for `access` looks as following:
 | destination.port | Port of the destination. | long |
 | ecs.version | ECS version | keyword |
 | event.created | Date/time when the event was first read by an agent, or by your pipeline. | date |
+| event.dataset | Event dataset | constant_keyword |
+| event.module | Event module | constant_keyword |
 | host.architecture | Operating system architecture. | keyword |
 | host.containerized | If the host is a container. | boolean |
 | host.domain | Name of the domain of which the host is a member. For example, on Windows this could be the host's Active Directory domain or NetBIOS domain name. For Linux this could be the domain of the host's LDAP provider. | keyword |
@@ -326,6 +328,8 @@ An example event for `error` looks as following:
 | data_stream.type | Data stream type. | constant_keyword |
 | ecs.version | ECS version | keyword |
 | event.created | Date/time when the event was first read by an agent, or by your pipeline. | date |
+| event.dataset | Event dataset | constant_keyword |
+| event.module | Event module | constant_keyword |
 | host.architecture | Operating system architecture. | keyword |
 | host.containerized | If the host is a container. | boolean |
 | host.domain | Name of the domain of which the host is a member. For example, on Windows this could be the host's Active Directory domain or NetBIOS domain name. For Linux this could be the domain of the host's LDAP provider. | keyword |
@@ -470,6 +474,8 @@ An example event for `stubstatus` looks as following:
 | data_stream.namespace | Data stream namespace. | constant_keyword |
 | data_stream.type | Data stream type. | constant_keyword |
 | ecs.version | ECS version | keyword |
+| event.dataset | Event dataset | constant_keyword |
+| event.module | Event module | constant_keyword |
 | host.architecture | Operating system architecture. | keyword |
 | host.containerized | If the host is a container. | boolean |
 | host.domain | Name of the domain of which the host is a member. For example, on Windows this could be the host's Active Directory domain or NetBIOS domain name. For Linux this could be the domain of the host's LDAP provider. | keyword |

diff --git a/packages/nginx/manifest.yml b/packages/nginx/manifest.yml
@@ -1,7 +1,7 @@
 format_version: 1.0.0
 name: nginx
 title: Nginx
-version: 0.6.2
+version: 0.7.0
 license: basic
 description: Nginx Integration
 type: integration
@@ -10,7 +10,7 @@ categories:
   - security
 release: experimental
 conditions:
-  kibana.version: "^7.13.0"
+  kibana.version: "^7.14.0"
 screenshots:
   - src: /img/nginx-metrics-overview.png
     title: Nginx metrics overview