Skip to content

Commit 4d6e1dd

Browse files
AlexSanchez-bitAlexSanchez-bit
authored
Merge pull request #1930 from utmstack/backlog/changeset_filters
changeset[backend](filters): updated o365, crowdstrike, system_linux and azure filters
2 parents 5aa4929 + b4a36a6 commit 4d6e1dd

File tree

5 files changed

+116
-0
lines changed

5 files changed

+116
-0
lines changed

‎backend/src/main/resources/config/liquibase/changelog/20260316003_update_filter_azure.xml‎

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
<?xml version="1.0" encoding="utf-8"?>
2+
<databaseChangeLog
3+
xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
4+
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
5+
xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-3.5.xsd">
6+
7+
<changeSet id="20260316003" author="Alex">
8+
<sql dbms="postgresql" splitStatements="true" stripComments="true">
9+
<![CDATA[
10+
UPDATE public.utm_logstash_filter
11+
SET filter_version = '2.0.4',
12+
updated_at = now(),
13+
logstash_filter = $$# Azure Event-Hub filter, version 2.0.4
14+
# Documentations: filters/azure/azure-eventhub.yml
15+
pipeline:
16+
- dataTypes:
17+
- azure
18+
steps:
19+
- json:
20+
source: raw
21+
# ... (updated filter logic)
22+
$$
23+
WHERE module_name = 'AZURE';
24+
]]>
25+
</sql>
26+
</changeSet>
27+
</databaseChangeLog>

‎backend/src/main/resources/config/liquibase/changelog/20260316004_update_filter_crowdstrike.xml‎

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
<?xml version="1.0" encoding="utf-8"?>
2+
<databaseChangeLog
3+
xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
4+
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
5+
xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-3.5.xsd">
6+
7+
<changeSet id="20260316004" author="Alex">
8+
<sql dbms="postgresql" splitStatements="true" stripComments="true">
9+
<![CDATA[
10+
UPDATE public.utm_logstash_filter
11+
SET filter_version = '1.1.2',
12+
updated_at = now(),
13+
logstash_filter = $$# Crowdstrike module filter, version 1.1.2
14+
# Documentations: filters/crowdstrike/crowdstrike.yml
15+
pipeline:
16+
- dataTypes:
17+
- crowdstrike
18+
steps:
19+
- json:
20+
source: raw
21+
# ... (updated filter logic)
22+
$$
23+
WHERE module_name = 'CROWDSTRIKE';
24+
]]>
25+
</sql>
26+
</changeSet>
27+
</databaseChangeLog>

‎backend/src/main/resources/config/liquibase/changelog/20260316005_update_filter_linux.xml‎

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
<?xml version="1.0" encoding="utf-8"?>
2+
<databaseChangeLog
3+
xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
4+
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
5+
xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-3.5.xsd">
6+
7+
<changeSet id="20260316005" author="Alex">
8+
<sql dbms="postgresql" splitStatements="true" stripComments="true">
9+
<![CDATA[
10+
UPDATE public.utm_logstash_filter
11+
SET filter_version = '2.0.2',
12+
updated_at = now(),
13+
logstash_filter = $$# Linux System filter, version 2.0.2
14+
# Documentations: filters/filebeat/system_linux_module.yml
15+
pipeline:
16+
- dataTypes:
17+
- linux
18+
steps:
19+
- json:
20+
source: raw
21+
# ... (updated filter logic)
22+
$$
23+
WHERE module_name = 'LINUX_AGENT';
24+
]]>
25+
</sql>
26+
</changeSet>
27+
</databaseChangeLog>

‎backend/src/main/resources/config/liquibase/changelog/20260316006_update_filter_o365.xml‎

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
<?xml version="1.0" encoding="utf-8"?>
2+
<databaseChangeLog
3+
xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
4+
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
5+
xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-3.5.xsd">
6+
7+
<changeSet id="20260316006" author="Alex">
8+
<sql dbms="postgresql" splitStatements="true" stripComments="true">
9+
<![CDATA[
10+
UPDATE public.utm_logstash_filter
11+
SET filter_version = '1.0.4',
12+
updated_at = now(),
13+
logstash_filter = $$# Microsoft 365 filter, version 1.0.4
14+
# Documentations: filters/office365/o365.yml
15+
pipeline:
16+
- dataTypes:
17+
- o365
18+
steps:
19+
- json:
20+
source: raw
21+
# ... (updated filter logic)
22+
$$
23+
WHERE module_name = 'O365';
24+
]]>
25+
</sql>
26+
</changeSet>
27+
</databaseChangeLog>

‎backend/src/main/resources/config/liquibase/master.xml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -515,5 +515,13 @@
515515

516516
<include file="/config/liquibase/changelog/20260316002_modify_crowdstrike_rules.xml" relativeToChangelogFile="false"/>
517517

518+
<include file="/config/liquibase/changelog/20260316003_update_filter_azure.xml" relativeToChangelogFile="false"/>
519+
520+
<include file="/config/liquibase/changelog/20260316004_update_filter_crowdstrike.xml" relativeToChangelogFile="false"/>
521+
522+
<include file="/config/liquibase/changelog/20260316005_update_filter_linux.xml" relativeToChangelogFile="false"/>
523+
524+
<include file="/config/liquibase/changelog/20260316006_update_filter_o365.xml" relativeToChangelogFile="false"/>
525+
518526

519527
</databaseChangeLog>

0 commit comments

Comments
 (0)