Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Request] Add 'service' to the Entity Store #6423

Open
machadoum opened this issue Jan 13, 2025 · 3 comments
Open

[Request] Add 'service' to the Entity Store #6423

machadoum opened this issue Jan 13, 2025 · 3 comments
Assignees
Labels
Docset: ESS Issues that apply to docs in the Stack release Docset: Serverless Issues for Serverless Security Feature: Entity Analytics Features or enhancements for any of the Entity pages Team: Entity Analytics v8.18.0 v9.0.0

Comments

@machadoum
Copy link
Member

machadoum commented Jan 13, 2025

Description

We're introducing the entity type 'service' to the Entity Store. Previously, only 'user' and 'host' were supported.
The new 'service' entity type should be displayed on all pages where the 'user' and 'host' entities are displayed. Ex: Entity Store page, Risk Score page, Entity Dashboards.
It will allow users to investigate and protect the services installed in their environment easily.
The user only needs to enable the entity store to install the' service' entity type.

Background & resources

Which documentation set does this change impact?

ESS only

ESS release

8.18

Serverless release

Early February, currently targeting the week of February 10th (please note that this is an estimate only)

Feature differences

Entity store is not supported on serverless

API docs impact

N/A

Prerequisites, privileges, feature flags

N/A

@machadoum machadoum added Feature: Entity Analytics Features or enhancements for any of the Entity pages Docset: ESS Issues that apply to docs in the Stack release Team: Entity Analytics v8.18.0 v9.0.0 labels Jan 13, 2025
@natasha-moore-elastic natasha-moore-elastic self-assigned this Jan 14, 2025
@natasha-moore-elastic
Copy link
Contributor

natasha-moore-elastic commented Jan 14, 2025

Hi @machadoum @jaredburgettelastic, just want to confirm that entity store and service entity type are still planned to be released in serverless in early Feb? Adding an estimated date/week for serverless release to tickets would be really helpful, even if it ends up changing later on. 🙏
Also, is there a test environment you could share for this feature? https://kibana.siem.estc.dev/ was EOLed at the end of last year.

@jaredburgettelastic
Copy link

jaredburgettelastic commented Jan 15, 2025

@natasha-moore-elastic Done! Updated the ticket above.

Yes, early February is still our target.

@natasha-moore-elastic natasha-moore-elastic added the Docset: Serverless Issues for Serverless Security label Jan 16, 2025
@natasha-moore-elastic
Copy link
Contributor

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Docset: ESS Issues that apply to docs in the Stack release Docset: Serverless Issues for Serverless Security Feature: Entity Analytics Features or enhancements for any of the Entity pages Team: Entity Analytics v8.18.0 v9.0.0
Projects
None yet
Development

No branches or pull requests

3 participants