Skip to content

[O365] Add device.id and user_agent fields #15732

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 4 commits into from
Oct 27, 2025
Merged

[O365] Add device.id and user_agent fields #15732

merged 4 commits into from
Oct 27, 2025
+1,822 −2

Conversation

@moxarth-rathod
Copy link
Contributor

Proposed commit message

o365: add device.id and user_agent fields from ExtendedProperties.additionalDetails

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

  • Clone integrations repo.
  • Install elastic package locally.
  • Start elastic stack using elastic-package.
  • Move to integrations/packages/o365 directory.
  • Run the following command to run tests.

elastic-package test -v

Related issues

@moxarth-rathod moxarth-rathod self-assigned this Oct 23, 2025
@moxarth-rathod moxarth-rathod requested a review from a team as a code owner October 23, 2025 05:42
@moxarth-rathod moxarth-rathod added Integration:o365 Microsoft Office 365 Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Team:Sit-Crest Crest developers on the Security Integrations team [elastic/sit-crest-contractors] labels Oct 23, 2025
@elasticmachine
Copy link

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@moxarth-rathod moxarth-rathod added the enhancement New feature or request label Oct 23, 2025
@elastic-vault-github-plugin-prod
Copy link

elastic-vault-github-plugin-prod bot commented Oct 23, 2025 •
edited
Loading

🚀 Benchmarks report

Package o365 👍(0) 💚(0) 💔(2)

Expand to view
Data stream Previous EPS New EPS Diff (%) Result
audit 2583.98 1517.45 -1066.53 (-41.27%) 💔
audit 2583.98 2145.92 -438.06 (-16.95%) 💔

To see the full report comment with /test benchmark fullreport

efd6
efd6 reviewed Oct 23, 2025
View reviewed changes
@moxarth-rathod moxarth-rathod requested a review from efd6 October 24, 2025 06:02
@elasticmachine
Copy link

💚 Build Succeeded

History

cc @moxarth-rathod

@moxarth-rathod moxarth-rathod merged commit 08f0bc8 into elastic:main Oct 27, 2025
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@efd6 efd6 efd6 approved these changes

Assignees

@moxarth-rathod moxarth-rathod

Labels

enhancement New feature or request Integration:o365 Microsoft Office 365 Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Team:Sit-Crest Crest developers on the Security Integrations team [elastic/sit-crest-contractors]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

[O365] Add DeviceId to Extended ECS

3 participants

@moxarth-rathod @elasticmachine @efd6