Update vulnerability-states fields (#177)

* Update vulnerability-states fields Adds wazuh.schema.version * Update events generator
wazuh · Mar 8, 2024 · 60990a6 · 60990a6
1 parent 84578ed
commit 60990a6
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 4 deletions.
diff --git a/ecs/vulnerability-detector/event-generator/event_generator.py b/ecs/vulnerability-detector/event-generator/event_generator.py
@@ -176,6 +176,9 @@ def generate_random_wazuh():
         },
         'manager': {
             'name': f'wazuh-manager-{random.randint(0,10)}'
+        },
+        'schema': {
+            'version': '1.7.0'
         }
     }
     return wazuh
@@ -187,7 +190,7 @@ def generate_random_data(number):
         event_data = {
             '@timestamp': generate_random_date(),
             'agent': generate_random_agent(),
-            'ecs': {'version': '1.7.0'},
+            # 'ecs': {'version': '1.7.0'},
             # 'event': generate_random_event(),
             'host': generate_random_host(),
             # 'labels': generate_random_labels(),

diff --git a/ecs/vulnerability-detector/fields/custom/wazuh.yml b/ecs/vulnerability-detector/fields/custom/wazuh.yml
@@ -18,4 +18,9 @@
       type: keyword
       level: custom
       description: >
-        Wazuh manager name. Used by dashboards to filter results on single node deployments.
+        Wazuh manager name. Used by dashboards to filter results on single node deployments.
+    - name: schema.version
+      type: keyword
+      level: custom
+      description: >
+        Wazuh schema version.
diff --git a/ecs/vulnerability-detector/fields/subset.yml b/ecs/vulnerability-detector/fields/subset.yml
@@ -8,8 +8,6 @@ fields:
       message: ""
   agent:
     fields: "*"
-  ecs:
-    fields: "*"
   package:
     fields: "*"
   host: