Skip to content

entityanalytics_okta: map roles data to ECS #14211

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

efd6
Copy link
Contributor

@efd6 efd6 commented Jun 11, 2025

Proposed commit message

See title.

Note

Marking as bug since it fixes absent mapping and restricts the version to stacks that have the agent feature.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • [ ]

How to test this PR locally

Related issues

Screenshots

@efd6 efd6 self-assigned this Jun 11, 2025
@efd6 efd6 added bugfix Pull request that fixes a bug issue Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Integration:entityanalytics_okta Okta Entity Analytics labels Jun 11, 2025
@efd6 efd6 force-pushed the 13165-entityanalytics_okta-int branch from 5fea2b9 to 3c12ed7 Compare June 11, 2025 23:35
@efd6 efd6 force-pushed the 13165-entityanalytics_okta-int branch from 3c12ed7 to 6d4d910 Compare June 12, 2025 00:01
@elastic-vault-github-plugin-prod

🚀 Benchmarks report

Package entityanalytics_okta 👍(0) 💚(0) 💔(1)

Expand to view
Data stream Previous EPS New EPS Diff (%) Result
entity 1257.86 980.39 -277.47 (-22.06%) 💔

To see the full report comment with /test benchmark fullreport

@elasticmachine
Copy link

💚 Build Succeeded

History

cc @efd6

@efd6
Copy link
Contributor Author

efd6 commented Jun 12, 2025

/test stack 9.0.2

@efd6 efd6 marked this pull request as ready for review June 12, 2025 02:03
@efd6 efd6 requested a review from a team as a code owner June 12, 2025 02:03
@elasticmachine
Copy link

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@efd6 efd6 requested a review from hop-dev June 12, 2025 02:03
formats:
- ISO8601
on_failure:
- rename:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why a rename here to the original form in the failure case?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If the format cannot be parsed, this retains the value as a keyword. It prevents non-mapping while retaining data. The alternative is to write the error into error.message. Happy to do the latter if you would prefer.

description: When the role was last updated.
- name: assignment_type
type: keyword
description: The Okta type the role can is assigned to.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
description: The Okta type the role can is assigned to.
description: The Okta type the role can be assigned to.

description: When the role was last updated.
- name: assignment_type
type: keyword
description: The Okta type the role can is assigned to.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
description: The Okta type the role can is assigned to.
description: The Okta type the role can be assigned to.

@efd6 efd6 force-pushed the 13165-entityanalytics_okta-int branch from c3312a8 to f34fabc Compare June 12, 2025 21:24
@efd6 efd6 force-pushed the 13165-entityanalytics_okta-int branch from f34fabc to 6bedcb6 Compare June 12, 2025 23:08
@elasticmachine
Copy link

💚 Build Succeeded

History

cc @efd6

Copy link

Quality Gate failed Quality Gate failed

Failed conditions
75.8% Coverage on New Code (required ≥ 80%)

See analysis details on SonarQube

Copy link
Contributor

@hop-dev hop-dev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested and can see user.roles being correctly populated 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bugfix Pull request that fixes a bug issue Integration:entityanalytics_okta Okta Entity Analytics Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Okta Entity Analytics]: Add the user.roles field to user entities containing their Okta admin role assignments
4 participants