-
Notifications
You must be signed in to change notification settings - Fork 156
Description
Type of issue
None
What documentation page is affected
https://www.elastic.co/docs/reference/integrations/cisco_umbrella
What happened?
Right now, it’s not documented on this page what version of the Umbrella Log Schema the integration supports.
Reviewing the source code for the integration here: https://github.com/elastic/integrations/blob/main/packages/cisco_umbrella/data_stream/log/elasticsearch/ingest_pipeline/default.yml#L104-L106, I believe it supports the fields from up to v8/9.
But it does not handle the fields that were added in v10 and v11, described in https://docs.umbrella.com/deployment-umbrella/docs/log-formats-and-versioning#find-your-log-schema-version
It would be nice if, under https://www.elastic.co/docs/reference/integrations/cisco_umbrella#umbrella or elsewhere, the page explicitly noted which version is supported, which I believe, currently, is v9 based on elastic/integrations#5446 adding support for v8, and afaik from the cisco docs, v9 doesn’t add any new fields (though that may be a misapprehension).
Additional info
No response