@@ -19,7 +19,7 @@ Elastic Agent must be installed. For more details, check the Elastic Agent [inst
19
19
20
20
## Setup
21
21
22
- ### Before setting up the integration, you will need credentials to connect to the Entro Security API.
22
+ ### Collect data from the Entro Security API
23
23
24
24
Log in to your Entro Security platform and generate an API Token. Note keep this token private and secure.
25
25
@@ -43,22 +43,22 @@ An example event for `audit` looks as following:
43
43
{
44
44
"@timestamp" : " 2025-05-27T20:12:44.000Z" ,
45
45
"agent" : {
46
- "ephemeral_id" : " 02e0b0b3-0669-46e0-9595-9cebc4e47721 " ,
47
- "id" : " e5b2169f-6a42-482f-b8dc-5f55da82499d " ,
48
- "name" : " elastic-agent-82489 " ,
46
+ "ephemeral_id" : " 342840a0-6a1a-4caa-b0dc-59ecea6d0709 " ,
47
+ "id" : " 16f5e042-d3f4-40f9-a0ea-20917399dcbd " ,
48
+ "name" : " elastic-agent-15525 " ,
49
49
"type" : " filebeat" ,
50
50
"version" : " 8.17.4"
51
51
},
52
52
"data_stream" : {
53
53
"dataset" : " entro.audit" ,
54
- "namespace" : " 29645 " ,
54
+ "namespace" : " 87243 " ,
55
55
"type" : " logs"
56
56
},
57
57
"ecs" : {
58
- "version" : " 8.11 .0"
58
+ "version" : " 8.17 .0"
59
59
},
60
60
"elastic_agent" : {
61
- "id" : " e5b2169f-6a42-482f-b8dc-5f55da82499d " ,
61
+ "id" : " 16f5e042-d3f4-40f9-a0ea-20917399dcbd " ,
62
62
"snapshot" : false ,
63
63
"version" : " 8.17.4"
64
64
},
@@ -69,14 +69,14 @@ An example event for `audit` looks as following:
69
69
],
70
70
"dataset" : " entro.audit" ,
71
71
"id" : " 105d6a3d-6468-4fcc-994e-f525011c53cf" ,
72
- "ingested" : " 2025-07-08T17:25:00Z " ,
72
+ "ingested" : " 2025-07-10T18:29:08Z " ,
73
73
"kind" : " event" ,
74
74
"type" : [
75
75
" info"
76
76
]
77
77
},
78
78
"host" : {
79
- "name" : " elastic-agent-82489 "
79
+ "name" : " elastic-agent-15525 "
80
80
},
81
81
"input" : {
82
82
"type" : " cel"
0 commit comments