diff --git a/packages/lmd/changelog.yml b/packages/lmd/changelog.yml index 07564cf3d58..cbf582cc4c1 100644 --- a/packages/lmd/changelog.yml +++ b/packages/lmd/changelog.yml @@ -1,4 +1,9 @@ # newer versions go on top +- version: "2.2.0" + changes: + - description: Fix bug in the pivot transform + type: bugfix + link: https://github.com/elastic/integrations/pull/12427 - version: "2.1.5" changes: - description: Add agent policy documentation diff --git a/packages/lmd/elasticsearch/transform/pivot_transform/transform.yml b/packages/lmd/elasticsearch/transform/pivot_transform/transform.yml index dbb09353ee1..fae8035abf6 100644 --- a/packages/lmd/elasticsearch/transform/pivot_transform/transform.yml +++ b/packages/lmd/elasticsearch/transform/pivot_transform/transform.yml @@ -23,7 +23,7 @@ source: 'destination.ip': type: ip script: - source: "if (doc['host.ip'].size()!=0){emit(doc['host.ip'][1]);} else{emit('None');}" + source: "if (doc['host.ip'].size() != 0){emit(doc['host.ip'][0]);}" dest: index: "ml-rdp-lmd" description: This transform runs hourly and collects windows RDP session information for Lateral Movement Detection package. @@ -73,5 +73,5 @@ sync: delay: 60s field: '@timestamp' _meta: - fleet_transform_version: 2.1.4 - run_as_kibana_system: false + fleet_transform_version: 2.2.0 + run_as_kibana_system: false \ No newline at end of file diff --git a/packages/lmd/manifest.yml b/packages/lmd/manifest.yml index f57539d0d65..9e253d9ad64 100644 --- a/packages/lmd/manifest.yml +++ b/packages/lmd/manifest.yml @@ -1,7 +1,7 @@ format_version: 3.0.0 name: lmd title: "Lateral Movement Detection" -version: 2.1.5 +version: 2.2.0 source: license: "Elastic-2.0" description: "ML package to detect lateral movement based on file transfer activity and Windows RDP events."