diff --git a/packages/ti_flashpoint/changelog.yml b/packages/ti_flashpoint/changelog.yml index 4fa7f6c2187..43158754d16 100644 --- a/packages/ti_flashpoint/changelog.yml +++ b/packages/ti_flashpoint/changelog.yml @@ -1,4 +1,9 @@ # newer versions go on top +- version: "0.4.0" + changes: + - description: Add X-FP-IntegrationPlatform, X-FP-IntegrationVersion and X-FP-IntegrationPlatformVersion client identification headers to all API requests. + type: enhancement + link: https://github.com/elastic/integrations/pull/20566 - version: "0.3.2" changes: - description: Set agentless deployment mode `release` field to `ga`. diff --git a/packages/ti_flashpoint/data_stream/alert/agent/stream/cel.yml.hbs b/packages/ti_flashpoint/data_stream/alert/agent/stream/cel.yml.hbs index 9545174dd0d..098e286dc59 100644 --- a/packages/ti_flashpoint/data_stream/alert/agent/stream/cel.yml.hbs +++ b/packages/ti_flashpoint/data_stream/alert/agent/stream/cel.yml.hbs @@ -22,6 +22,8 @@ state: initial_interval: {{initial_interval}} page_size: {{page_size}} api_token: {{api_token}} + integration_version: !!str {{#if _meta.package.version}}{{_meta.package.version}}{{else}}unknown{{/if}} + integration_platform_version: !!str {{#if _meta.agent.version}}{{_meta.agent.version}}{{else}}unknown{{/if}} redact: fields: - api_token @@ -40,6 +42,9 @@ program: | "Header": { "Accept": ["application/json"], "Authorization": ["Bearer " + state.api_token], + "X-FP-IntegrationPlatform": ["Elastic"], + "X-FP-IntegrationVersion": [state.integration_version], + "X-FP-IntegrationPlatformVersion": [state.integration_platform_version], } }).do_request().as(resp, resp.StatusCode == 200 ? resp.Body.decode_json().as(body, diff --git a/packages/ti_flashpoint/data_stream/indicator/agent/stream/cel.yml.hbs b/packages/ti_flashpoint/data_stream/indicator/agent/stream/cel.yml.hbs index a65d5910552..5209513ac1d 100644 --- a/packages/ti_flashpoint/data_stream/indicator/agent/stream/cel.yml.hbs +++ b/packages/ti_flashpoint/data_stream/indicator/agent/stream/cel.yml.hbs @@ -22,6 +22,8 @@ state: initial_interval: {{initial_interval}} page_size: {{page_size}} api_token: {{api_token}} + integration_version: !!str {{#if _meta.package.version}}{{_meta.package.version}}{{else}}unknown{{/if}} + integration_platform_version: !!str {{#if _meta.agent.version}}{{_meta.agent.version}}{{else}}unknown{{/if}} redact: fields: - api_token @@ -40,6 +42,9 @@ program: | "Header": { "Accept": ["application/json"], "Authorization": ["Bearer " + state.api_token], + "X-FP-IntegrationPlatform": ["Elastic"], + "X-FP-IntegrationVersion": [state.integration_version], + "X-FP-IntegrationPlatformVersion": [state.integration_platform_version], } }).do_request().as(resp, resp.StatusCode == 200 ? resp.Body.decode_json().as(body, diff --git a/packages/ti_flashpoint/data_stream/vulnerability/agent/stream/cel.yml.hbs b/packages/ti_flashpoint/data_stream/vulnerability/agent/stream/cel.yml.hbs index 95b37bd752a..1b182a86ab8 100644 --- a/packages/ti_flashpoint/data_stream/vulnerability/agent/stream/cel.yml.hbs +++ b/packages/ti_flashpoint/data_stream/vulnerability/agent/stream/cel.yml.hbs @@ -22,6 +22,8 @@ state: initial_interval: {{initial_interval}} page_size: {{page_size}} api_token: {{api_token}} + integration_version: !!str {{#if _meta.package.version}}{{_meta.package.version}}{{else}}unknown{{/if}} + integration_platform_version: !!str {{#if _meta.agent.version}}{{_meta.agent.version}}{{else}}unknown{{/if}} redact: fields: - api_token @@ -39,6 +41,9 @@ program: | "Header": { "Accept": ["application/json"], "Authorization": ["Bearer " + state.api_token], + "X-FP-IntegrationPlatform": ["Elastic"], + "X-FP-IntegrationVersion": [state.integration_version], + "X-FP-IntegrationPlatformVersion": [state.integration_platform_version], } }).do_request().as(resp, resp.StatusCode == 200 ? resp.Body.decode_json().as(body, diff --git a/packages/ti_flashpoint/manifest.yml b/packages/ti_flashpoint/manifest.yml index cc653aadc33..89db524d3ec 100644 --- a/packages/ti_flashpoint/manifest.yml +++ b/packages/ti_flashpoint/manifest.yml @@ -1,7 +1,7 @@ format_version: 3.3.2 name: ti_flashpoint title: Flashpoint -version: 0.3.2 +version: 0.4.0 description: Collect logs from Flashpoint with Elastic Agent. type: integration categories: