diff --git a/packages/wiz/changelog.yml b/packages/wiz/changelog.yml index 342e18488af..965d0626bfd 100644 --- a/packages/wiz/changelog.yml +++ b/packages/wiz/changelog.yml @@ -1,4 +1,9 @@ # newer versions go on top +- version: "4.8.0" + changes: + - description: Set the `latest_cdr_vulnerabilities` and `latest_cdr_misconfigurations` transform destination indices to 3 primary shards to avoid shard-size warnings at scale. The destination indices are re-created (`-v3` and `-v4` respectively). + type: enhancement + link: https://github.com/elastic/integrations/pull/1 - version: "4.7.0" changes: - description: Add tags to ingest pipeline processors and add `preserve_original_event` to pipeline-level `on_failure` handlers. diff --git a/packages/wiz/elasticsearch/transform/latest_cdr_misconfigurations/manifest.yml b/packages/wiz/elasticsearch/transform/latest_cdr_misconfigurations/manifest.yml new file mode 100644 index 00000000000..466cc48b232 --- /dev/null +++ b/packages/wiz/elasticsearch/transform/latest_cdr_misconfigurations/manifest.yml @@ -0,0 +1,5 @@ +start: true +destination_index_template: + settings: + index: + number_of_shards: 3 diff --git a/packages/wiz/elasticsearch/transform/latest_cdr_misconfigurations/transform.yml b/packages/wiz/elasticsearch/transform/latest_cdr_misconfigurations/transform.yml index 1a29df12aa0..4cd1c497c0d 100644 --- a/packages/wiz/elasticsearch/transform/latest_cdr_misconfigurations/transform.yml +++ b/packages/wiz/elasticsearch/transform/latest_cdr_misconfigurations/transform.yml @@ -15,7 +15,7 @@ source: - data_frozen - data_cold dest: - index: "security_solution-wiz.misconfiguration_latest-v3" + index: "security_solution-wiz.misconfiguration_latest-v4" aliases: - alias: "security_solution-wiz.misconfiguration_latest" move_on_creation: true @@ -40,4 +40,4 @@ _meta: managed: true # Bump this version to delete, reinstall, and restart the transform during package. # Version bump is needed if there is any code change in transform. - fleet_transform_version: 0.4.0 + fleet_transform_version: 0.5.0 diff --git a/packages/wiz/elasticsearch/transform/latest_cdr_vulnerabilities/manifest.yml b/packages/wiz/elasticsearch/transform/latest_cdr_vulnerabilities/manifest.yml new file mode 100644 index 00000000000..466cc48b232 --- /dev/null +++ b/packages/wiz/elasticsearch/transform/latest_cdr_vulnerabilities/manifest.yml @@ -0,0 +1,5 @@ +start: true +destination_index_template: + settings: + index: + number_of_shards: 3 diff --git a/packages/wiz/elasticsearch/transform/latest_cdr_vulnerabilities/transform.yml b/packages/wiz/elasticsearch/transform/latest_cdr_vulnerabilities/transform.yml index bec94dd66a0..464b6a6ce6f 100644 --- a/packages/wiz/elasticsearch/transform/latest_cdr_vulnerabilities/transform.yml +++ b/packages/wiz/elasticsearch/transform/latest_cdr_vulnerabilities/transform.yml @@ -15,7 +15,7 @@ source: - data_frozen - data_cold dest: - index: "security_solution-wiz.vulnerability_latest-v2" + index: "security_solution-wiz.vulnerability_latest-v3" aliases: - alias: "security_solution-wiz.vulnerability_latest" move_on_creation: true @@ -42,4 +42,4 @@ _meta: managed: true # Bump this version to delete, reinstall, and restart the transform during package. # Version bump is needed if there is any code change in transform. - fleet_transform_version: 0.3.0 + fleet_transform_version: 0.4.0 diff --git a/packages/wiz/manifest.yml b/packages/wiz/manifest.yml index f5fd5abf6f2..bbcb78a2a57 100644 --- a/packages/wiz/manifest.yml +++ b/packages/wiz/manifest.yml @@ -1,7 +1,7 @@ format_version: 3.3.2 name: wiz title: Wiz -version: "4.7.0" +version: "4.8.0" description: Collect logs from Wiz with Elastic Agent. type: integration categories: