opensearch-docs-cn

Commit Graph

Author	SHA1	Message	Date
Chris Moore	e74831d6e8	Add documentation for automatic Alerting workflows from detector creation (#5003 ) * fix#4999 auto alerting workflows Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4999 auto alerting workflows Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4999 auto alerting workflows Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4999 auto alerting workflows Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4999 auto alerting workflows Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4999 auto alerting workflows Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4999 auto alerting workflows Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4999 auto alerting workflows Signed-off-by: cwillum <cwmmoore@amazon.com> --------- Signed-off-by: cwillum <cwmmoore@amazon.com>	2023-09-19 14:45:37 -07:00
Chris Moore	dde7c02b8d	Add documentation that supports custom log types (#4969 ) * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4741 custom logtype updates Signed-off-by: cwillum <cwmmoore@amazon.com> --------- Signed-off-by: cwillum <cwmmoore@amazon.com>	2023-09-19 14:36:56 -07:00
Chris Moore	b9b21e1e30	Add documentation to provide a link from detector creation to detection rule creation in using rules docs (#4829 ) * fix#4828 link to detection rule creation Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4828 link to detection rule creation Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4828 link to detection rule creation Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4828 link to detection rule creation Signed-off-by: cwillum <cwmmoore@amazon.com> --------- Signed-off-by: cwillum <cwmmoore@amazon.com>	2023-08-17 17:22:04 -07:00
Chris Moore	169f71427c	Fix correlation engine documentation by removing all instances of the experimental flag for 2.9 (#4635 ) * fix#4631 correlation rule updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4631 correlation rule updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4631 correlation rule updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4631 correlation rule updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4631 correlation rule updates Signed-off-by: cwillum <cwmmoore@amazon.com> --------- Signed-off-by: cwillum <cwmmoore@amazon.com>	2023-07-25 14:03:50 -07:00
Chris Moore	837a0f5c89	Fix links in Alerting documentation and other for 2.9 release (#4606 ) * fix#4056 fix links for 2.9 Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4056 fix links for 2.9 Signed-off-by: cwillum <cwmmoore@amazon.com> --------- Signed-off-by: cwillum <cwmmoore@amazon.com>	2023-07-24 10:56:07 -07:00
Chris Moore	49e8391d86	Add documentation for OCSF field mapping and correlation engine API (#4549 ) * fix#4500 ocsf fields and api Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4500 ocsf fields and api Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4500 ocsf fields and api Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4500 ocsf fields and api Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4500 ocsf fields and api Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4500 ocsf fields and api Signed-off-by: cwillum <cwmmoore@amazon.com> * add missing param descriptions (#4555) Signed-off-by: Subhobrata Dey <sbcd90@gmail.com> * fix#4500 ocsf fields and api Signed-off-by: cwillum <cwmmoore@amazon.com> * Revert "fix#4500 ocsf fields and api" This reverts commit c6db296b2e30dd9e201cdf510d77e1af7335801d. merge conflict with same edits on another branch# * fix#4500 ocsf fields and api Signed-off-by: cwillum <cwmmoore@amazon.com> * Revert "fix#4500 ocsf fields and api" This reverts commit 7a70dc39644b5020685015245d755131c2264e03. merge conflict with second branch :wq * Revert "fix#4500 ocsf fields and api" This reverts commit ef13a74b403984e0c205a79119ec301f90b7dcc1. * fix#4500 edits post merge conflict Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4500 ocsf fields and api Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4500 ocsf fields and api Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4500 ocsf fields and api Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4500 ocsf fields and api Signed-off-by: cwillum <cwmmoore@amazon.com> --------- Signed-off-by: cwillum <cwmmoore@amazon.com> Signed-off-by: Subhobrata Dey <sbcd90@gmail.com> Co-authored-by: Subhobrata Dey <sbcd90@gmail.com>	2023-07-17 13:52:13 -07:00
Chris Moore	4f0fb7e9c6	Add documentation for Security Analytics UI updates for 2.8 (#4208 ) * fix#4134 SecAnalytics UI updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4134 SecAnalytics UI updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4134 SecAnalytics UI updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4134 SecAnalytics UI updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4134 SecAnalytics UI updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4134 SecAnalytics UI updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4134 SecAnalytics UI updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4134 SecAnalytics UI updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#4134 SecAnalytics UI updates Signed-off-by: cwillum <cwmmoore@amazon.com> --------- Signed-off-by: cwillum <cwmmoore@amazon.com>	2023-06-02 13:19:55 -07:00
Chris Moore	cffae76ac2	Add correlation engine to Security Analytics documentation (#3814 ) * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3566 correlation engine Signed-off-by: cwillum <cwmmoore@amazon.com> --------- Signed-off-by: cwillum <cwmmoore@amazon.com>	2023-05-02 10:36:27 -07:00
kolchfa-aws	c9e372f053	Link fix (#3223 ) Signed-off-by: Fanit Kolchina <kolchfa@amazon.com>	2023-03-06 11:41:22 -05:00
Chris Moore	7bc7f0e5e9	Add formatting fixes for Security Analytics (#3128 ) * fix#3126-sec-analytics-formatting Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3126-sec-analytics-formatting Signed-off-by: cwillum <cwmmoore@amazon.com> --------- Signed-off-by: cwillum <cwmmoore@amazon.com>	2023-02-28 16:16:45 -08:00
Chris Moore	b49f5fcd76	Add documentation for log type updates in Security Analytics - pt. 2 (#3083 ) * fix#3018-sec-analytics-2.6-II Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6-II Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6-II Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6-II Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6-II Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6-II Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6-II Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6-II Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6-II Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6-II Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6-II Signed-off-by: cwillum <cwmmoore@amazon.com> --------- Signed-off-by: cwillum <cwmmoore@amazon.com>	2023-02-28 10:13:59 -08:00
Chris Moore	2baa0aa05c	Add documentation for log type updates in Security Analytics (#3066 ) * fix#3018-sec-analytics-2.6 Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6 Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6 Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6 Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6 Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6 Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6 Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#3018-sec-analytics-2.6 Signed-off-by: cwillum <cwmmoore@amazon.com> --------- Signed-off-by: cwillum <cwmmoore@amazon.com>	2023-02-24 16:14:44 -08:00
Chris Moore	8b8d9685d7	Security Analytics—additional updates following 2.5 release (#2515 ) * fix#2400-updates-revisit Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-updates-revisit Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-updates-revisit Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-updates-revisit Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-updates-revisit Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-updates-revisit Signed-off-by: cwillum <cwmmoore@amazon.com> * Update _security-analytics/sec-analytics-config/detectors-config.md Co-authored-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com> * Update _security-analytics/sec-analytics-config/detectors-config.md Co-authored-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com> * fix#2400-updates-revisit Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-updates-revisit Signed-off-by: cwillum <cwmmoore@amazon.com> --------- Signed-off-by: cwillum <cwmmoore@amazon.com> Co-authored-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com>	2023-01-31 17:58:14 -08:00
Chris Moore	e98ee6d833	Update field mapping documentation for Security Analytics (#2422 ) * fix#2400-field-mappings Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-field-mappings Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-field-mappings Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-field-mappings Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-field-mappings Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-field-mappings Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-field-mappings Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-field-mappings Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-field-mappings Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-field-mappings Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-field-mappings Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-field-mappings Signed-off-by: cwillum <cwmmoore@amazon.com> Signed-off-by: cwillum <cwmmoore@amazon.com>	2023-01-23 10:31:46 -08:00
Chris Moore	f89e111983	Updates to Security Analytics documentation (#2408 ) * fix#2400-revisions-to-current Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-SecAnalytics-updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-SecAnalytics-updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-SecAnalytics-updates Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#2400-SecAnalytics-updates Signed-off-by: cwillum <cwmmoore@amazon.com> Signed-off-by: cwillum <cwmmoore@amazon.com>	2023-01-18 09:46:44 -08:00
Chris Moore	605edd5ac3	Add documentation for Security Analytics plugin (#1824 ) * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * Delete admin-api.md * Delete api-index.md * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics (#1901) Signed-off-by: Subhobrata Dey <sbcd90@gmail.com> Signed-off-by: Subhobrata Dey <sbcd90@gmail.com> Co-authored-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> * fix#939-sec-analytics Signed-off-by: cwillum <cwmmoore@amazon.com> Signed-off-by: cwillum <cwmmoore@amazon.com> Signed-off-by: Subhobrata Dey <sbcd90@gmail.com> Co-authored-by: Subhobrata Dey <sbcd90@gmail.com> Co-authored-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com>	2022-11-18 10:19:06 -08:00

16 Commits