Skip to content

Conversation

maxcold
Copy link
Contributor

@maxcold maxcold commented Sep 10, 2025

Proposed commit message

Native Misconfiguration transform historically had 26h retention policy. When moving the transform installation from Kibana to the integration package, this was by mistake changed to 90d which we only use for 3rd party integrations which don't do full posture evaluation every so often. Related PR https://github.com/elastic/integrations/pull/13444/files#diff-551e45f92c420ee73177d3b5e00b338e0449b6c73eda3d1e658782752eb34084R23
This PR fixes the retention policy to 26h and updates the transform version

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • [ ]

How to test this PR locally

Related issues

Screenshots

@maxcold maxcold added the Team:Cloud Security Cloud Security team [elastic/cloud-security-posture] label Sep 10, 2025
@maxcold maxcold requested a review from a team as a code owner September 10, 2025 10:05
@maxcold maxcold added Integration:cloud_security_posture Security Posture Management bugfix Pull request that fixes a bug issue labels Sep 10, 2025
Copy link
Contributor

@opauloh opauloh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@maxcold maxcold force-pushed the csp-change-misconfig-transform-retention-26h branch from a6f63e2 to 88181e5 Compare September 11, 2025 09:13
Copy link

@elastic-vault-github-plugin-prod

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@elasticmachine
Copy link

💚 Build Succeeded

History

@maxcold maxcold merged commit c7ee303 into elastic:main Sep 11, 2025
9 checks passed
@maxcold maxcold deleted the csp-change-misconfig-transform-retention-26h branch September 11, 2025 12:03
@elastic-vault-github-plugin-prod

Package cloud_security_posture - 3.1.0-preview03 containing this change is available at https://epr.elastic.co/package/cloud_security_posture/3.1.0-preview03/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bugfix Pull request that fixes a bug issue Integration:cloud_security_posture Security Posture Management Team:Cloud Security Cloud Security team [elastic/cloud-security-posture]
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants