wazuh-indexer-plugins/CHANGELOG.md
Álex Ruiz Becerra a15390da2f
Create integrations with no rules in the SAP (#765)
* Create integrations with no rules in the SAP

* Add changelog entry
2026-02-02 14:41:57 +01:00

12 KiB

CHANGELOG

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning. See the CONTRIBUTING guide for instructions on how to add changelog entries.

Unreleased 5.0.x

Added

  • Create index and index templates for 5.0.0 (#452)
  • Add ISM rollover policy for stateless indices (#471)
  • Add scripts to extract the product versions (#483)
  • Add SCA index to 5.0.0 (#516)
  • Add repository bumper (#500)
  • Add documentation for the setup plugin (#498)
  • Add documentation for default users and roles (RBAC) (#535)
  • Implement retry mechanism to the initialization plugin (#541)
  • Add documentation for reporting plugin (#544)
  • Add index definition for stateless indices (#554)
  • Add tooling and index definitions for Wazuh decoders (#581)
  • Categorize WCS stateless indices (#588)
  • Add major version to index aliases (#592)
  • Increase max_docvalue_fields_search to 200 (#594)
  • Add cloud services subcategories (#595)
  • Add AWS Bedrock integration (#602)
  • Add wazuh.protocol.location and wazuh.protocol.queue fields to WCS (#613)
  • Add version to the GH Workflow names (#570)
  • Add browser-extensions and services inventory indices to documentation (#574)
  • Add state.modified_at to stateful indexes (#561)
  • Add WCS integration fields to stateless indices (#621)
  • Implement pre-processing ECS sources types sanitization (#628)
  • Add Security Compliance fields to the WCS (#643)
  • Initialize indexer content manager (#651)
  • Indexer's Content Manager Rest API implementation (#662)
  • Implement Imposter mock server for CTI API #661
  • Implement authentication in CTI Console #666
  • Initialize consumers metadata index on start (#668)
  • Add job scheduler basic logic (#671)
  • Init content from snapshot (#670)
  • Add scheduled content update (#682)
  • Implement space-wide content management (#684)
  • Implement hash of hashes calculation (#686)
  • Import new content to the Security Analytics plugin (#690)
  • Initialize content on plugin startup (#696)
  • Implement threat detectors creation (#703)
  • Implement complete initialization of content (#704)
  • Complete content SAP resources management (#713)
  • Add new content manager settings (#717)
  • Apply default replicas setting from configuration on startup (#733)
  • Extend OpenAPI document with user-generated content management endpoints (#736)
  • Define Index schema for IoC content (#744)
  • Create integrations with no rules in the SAP (#765)

Dependencies

  • Upgrade to Gradle 8.14.3 (#649)

Changed

  • Replace dependabot's directories keys with wildcard (#443)
  • Adapt setup plugin for 5.x (#450)
  • Third-party integrations maintenance (#478) (#540) (#548) (#566) (#583) (#642) (#701) (#742)
  • Replace and remove deprecated settings (#476)
  • Migrate WCS changes from 4.x (#488) (#552) (#568)
  • Implement checksum fields into stateful ECS mappings (#519) (#569)
  • FIM indices rework (#509)
  • Update GitHub Actions versions in main branch (#572)
  • Update index templates with agent fields (#578)
  • Rename indices from -5.x- to -v5- (#597)
  • Use stricter field limits for the WCS indices (#589)
  • Bump WCS to ECS v9.1.0 (#600) (#631)
  • Replace genai.* nested fields with keyword array (#608)
  • Check GitHub actions with dependabot (#601)
  • Automatically regenerate dependant stateless modules on base module change (#618)
  • Restructure WCS files(#629)
  • Restructuring of the repository tooling (#625)
  • Fix mdbook to version 0.4.x (#627)
  • Adapt WCS generation script to save the ECS flat of stateless module (#646)
  • Replace time-series indices with data streams (#562)
  • Rename index templates (#659)
  • Resolve SAP dependency in Content Manager's build workflow (#702)
  • Update build packages documentation(#708)
  • Avoid creation of Integrations with no rules associated (#709)
  • Merge cloud-services categories (#710)
  • Send Integration ID to SAP for detector creation (#712)
  • Update Content Manager docs (#716)
  • Update CTI field mappings (#718) (#725)
  • Update content spaces (#724)
  • Extend JsonPatch to process JsonArray (#729)
  • Improve Content Manager code quality (#720)
  • Improve spotless implementation (#740)
  • Unify CTI context (#747)

Deprecated

Removed

  • Delete files not needed for 5.0.0 (#439)
  • Remove extra fields from CSV documentation (#479)
  • Remove outdated documentation (#532)
  • Remove ECS object from WCS definitions (#612)
  • Remove alerts and archives index creation (#693)

Fixed

  • Improve ECS folder structure (#473)
  • Fix permissions for job 'call-build-workflow' (#492)
  • Update event generators (#505)
  • Update DEVELOPER_GUIDE.md to use JDK 21 (#538)
  • Fix WCS generator modules detection issues (#620)
  • Fix verify_integrations script to read the integrations from module_list.txt (#640)
  • Remove ECS fields from gcp's custom fields definition (#675)
  • Fix mdbook-mermaid build errors (#699)
  • Fix update of policy type documents (#707)
  • Fix integrations not being created under the correct category #705
  • Set GSON object-to-number policy to LONG_OR_DOUBLE in Resources model #721
  • Fix deserialization bug (#737)

Security

  • Reduce risk of GITHUB_TOKEN exposure (#484)
  • Bump requests in /integrations/amazon-security-lake/tests (#491)