Skip to content

Commit 5cdc06c

Browse files
lastpass: don't update fleet health status to degraded pagination completes
This change bumps minimum Kibana version to ^8.19.4 || ~9.0.7 || ^9.1.4 and adds `do_not_log_failure: true` in set processors to avoid updating fleet health status to degraded.
1 parent 8ffa284 commit 5cdc06c

File tree

9 files changed

+72
-63
lines changed

9 files changed

+72
-63
lines changed

packages/lastpass/changelog.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,9 @@
11
# newer versions go on top
2+
- version: "1.21.0"
3+
changes:
4+
- description: Prevent updating fleet health status to degraded when pagination completes.
5+
type: enhancement
6+
link: https://github.com/elastic/integrations/pull/16532
27
- version: "1.20.0"
38
changes:
49
- description: Update Kibana constraint to support 9.0.0.

packages/lastpass/data_stream/detailed_shared_folder/agent/stream/httpjson.yml.hbs

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -44,6 +44,7 @@ response.pagination:
4444
target: body.data.pageindex
4545
value: '[[if (eq (len .last_response.body) (toInt .body.data.pagesize))]][[add .last_response.page 1]][[end]]'
4646
fail_on_template_error: true
47+
do_not_log_failure: true
4748
response.split:
4849
target: body.data
4950
type: map

packages/lastpass/data_stream/detailed_shared_folder/sample_event.json

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,30 +1,30 @@
11
{
2-
"@timestamp": "2024-05-24T11:28:38.242Z",
2+
"@timestamp": "2025-12-12T08:59:20.423Z",
33
"agent": {
4-
"ephemeral_id": "4a4388c0-12ab-4c2c-910c-c912f6bd4730",
5-
"id": "b0183e4b-ecd8-4ee9-8e73-bb43ce3ddcf2",
6-
"name": "docker-fleet-agent",
4+
"ephemeral_id": "d34469d9-73df-4f90-bc77-b13f8741e23d",
5+
"id": "6d931462-347a-49af-922d-b3918041d003",
6+
"name": "elastic-agent-53629",
77
"type": "filebeat",
8-
"version": "8.12.2"
8+
"version": "8.19.4"
99
},
1010
"data_stream": {
1111
"dataset": "lastpass.detailed_shared_folder",
12-
"namespace": "ep",
12+
"namespace": "88569",
1313
"type": "logs"
1414
},
1515
"ecs": {
1616
"version": "8.11.0"
1717
},
1818
"elastic_agent": {
19-
"id": "b0183e4b-ecd8-4ee9-8e73-bb43ce3ddcf2",
19+
"id": "6d931462-347a-49af-922d-b3918041d003",
2020
"snapshot": false,
21-
"version": "8.12.2"
21+
"version": "8.19.4"
2222
},
2323
"event": {
2424
"agent_id_status": "verified",
25-
"created": "2024-05-24T11:28:38.242Z",
25+
"created": "2025-12-12T08:59:20.423Z",
2626
"dataset": "lastpass.detailed_shared_folder",
27-
"ingested": "2024-05-24T11:28:50Z",
27+
"ingested": "2025-12-12T08:59:23Z",
2828
"kind": "state",
2929
"original": "{\"id\":\"101\",\"score\":99,\"sharedfoldername\":\"ThisSFName\",\"users\":{\"can_administer\":true,\"give\":false,\"readonly\":true,\"sites\":[\"aaa.com\",\"bbb.com\"],\"username\":\"[email protected]\"}}",
3030
"type": [
@@ -67,4 +67,4 @@
6767
"user": {
6868
"email": "[email protected]"
6969
}
70-
}
70+
}

packages/lastpass/data_stream/event_report/agent/stream/httpjson.yml.hbs

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -43,10 +43,12 @@ response.pagination:
4343
target: body.data.from
4444
value: '[[if (ne .last_response.body.next nil)]][[.last_response.url.params.Get "from"]][[end]]'
4545
fail_on_template_error: true
46+
do_not_log_failure: true
4647
- set:
4748
target: body.data.to
4849
value: '[[if (ne .last_response.body.next nil)]][[formatDate (parseTimestampMilli (div (toInt .last_response.body.next) 1000)) "2006-01-02 15:04:05" "Local"]][[end]]'
4950
fail_on_template_error: true
51+
do_not_log_failure: true
5052
response.split:
5153
target: body.data
5254
type: map

packages/lastpass/data_stream/event_report/sample_event.json

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,34 +1,34 @@
11
{
22
"@timestamp": "2015-07-17T09:51:51.000Z",
33
"agent": {
4-
"ephemeral_id": "9ece9bbd-9d6c-4204-bd9f-3182e1a55f27",
5-
"id": "02365282-f602-4b79-beec-adb210ac6467",
6-
"name": "docker-fleet-agent",
4+
"ephemeral_id": "cf014d99-eaa3-47af-b77d-5414873cbe35",
5+
"id": "d0222733-fe19-4c03-8713-959506dfed5b",
6+
"name": "elastic-agent-52217",
77
"type": "filebeat",
8-
"version": "8.7.1"
8+
"version": "8.19.4"
99
},
1010
"data_stream": {
1111
"dataset": "lastpass.event_report",
12-
"namespace": "ep",
12+
"namespace": "96245",
1313
"type": "logs"
1414
},
1515
"ecs": {
1616
"version": "8.11.0"
1717
},
1818
"elastic_agent": {
19-
"id": "02365282-f602-4b79-beec-adb210ac6467",
19+
"id": "d0222733-fe19-4c03-8713-959506dfed5b",
2020
"snapshot": false,
21-
"version": "8.7.1"
21+
"version": "8.19.4"
2222
},
2323
"event": {
2424
"action": "failed login attempt",
2525
"agent_id_status": "verified",
2626
"category": [
2727
"authentication"
2828
],
29-
"created": "2023-08-14T22:51:42.186Z",
29+
"created": "2025-12-12T09:00:10.654Z",
3030
"dataset": "lastpass.event_report",
31-
"ingested": "2023-08-14T22:51:43Z",
31+
"ingested": "2025-12-12T09:00:13Z",
3232
"kind": "event",
3333
"original": "{\"Action\":\"Failed Login Attempt\",\"Data\":\"\",\"IP_Address\":\"10.16.21.21\",\"Time\":\"2015-07-17 09:51:51\",\"Username\":\"[email protected]\",\"id\":\"Event1\"}",
3434
"outcome": "failure",
@@ -70,4 +70,4 @@
7070
7171
]
7272
}
73-
}
73+
}

packages/lastpass/data_stream/user/agent/stream/httpjson.yml.hbs

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -36,6 +36,7 @@ response.pagination:
3636
target: body.data.pageindex
3737
value: '[[if (eq (toInt .last_response.body.count) (toInt .body.data.pagesize))]][[.last_response.page]][[end]]'
3838
fail_on_template_error: true
39+
do_not_log_failure: true
3940
response.split:
4041
target: body.Users
4142
type: map

packages/lastpass/data_stream/user/sample_event.json

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,33 +1,33 @@
11
{
2-
"@timestamp": "2023-07-24T13:40:43.764Z",
2+
"@timestamp": "2025-12-12T09:01:00.598Z",
33
"agent": {
4-
"ephemeral_id": "7022fcec-d213-4320-8c7d-663b20b9d82c",
5-
"id": "e4c29d91-bbb7-42b8-80fd-85ddb56d2300",
6-
"name": "docker-fleet-agent",
4+
"ephemeral_id": "6352087b-6e4f-4918-9d95-5cc347bcfc31",
5+
"id": "ddf3533d-dabe-4e5e-b4f5-6dbcb12e6959",
6+
"name": "elastic-agent-91592",
77
"type": "filebeat",
8-
"version": "8.8.2"
8+
"version": "8.19.4"
99
},
1010
"data_stream": {
1111
"dataset": "lastpass.user",
12-
"namespace": "ep",
12+
"namespace": "64234",
1313
"type": "logs"
1414
},
1515
"ecs": {
1616
"version": "8.11.0"
1717
},
1818
"elastic_agent": {
19-
"id": "e4c29d91-bbb7-42b8-80fd-85ddb56d2300",
19+
"id": "ddf3533d-dabe-4e5e-b4f5-6dbcb12e6959",
2020
"snapshot": false,
21-
"version": "8.8.2"
21+
"version": "8.19.4"
2222
},
2323
"event": {
2424
"agent_id_status": "verified",
2525
"category": [
2626
"iam"
2727
],
28-
"created": "2023-07-24T13:40:43.764Z",
28+
"created": "2025-12-12T09:01:00.598Z",
2929
"dataset": "lastpass.user",
30-
"ingested": "2023-07-24T13:40:46Z",
30+
"ingested": "2025-12-12T09:01:03Z",
3131
"kind": "state",
3232
"original": "{\"admin\":false,\"applications\":0,\"attachments\":1,\"created\":\"2014-03-12 10:02:56\",\"disabled\":false,\"formfills\":2,\"fullname\":\"Ned Flanders\",\"groups\":[\"Domain Admins\",\"Dev Team\",\"Support Team\"],\"id\":\"101\",\"last_login\":\"2015-05-29 11:45:05\",\"last_pw_change\":\"2015-05-19 10:58:33\",\"linked\":\"[email protected]\",\"mpstrength\":\"100\",\"neverloggedin\":false,\"notes\":19,\"password_reset_required\":false,\"sites\":72,\"username\":\"[email protected]\"}",
3333
"type": [
@@ -86,4 +86,4 @@
8686
},
8787
"id": "101"
8888
}
89-
}
89+
}

packages/lastpass/docs/README.md

Lines changed: 29 additions & 29 deletions
Original file line numberDiff line numberDiff line change
@@ -52,32 +52,32 @@ An example event for `detailed_shared_folder` looks as following:
5252

5353
```json
5454
{
55-
"@timestamp": "2024-05-24T11:28:38.242Z",
55+
"@timestamp": "2025-12-12T08:59:20.423Z",
5656
"agent": {
57-
"ephemeral_id": "4a4388c0-12ab-4c2c-910c-c912f6bd4730",
58-
"id": "b0183e4b-ecd8-4ee9-8e73-bb43ce3ddcf2",
59-
"name": "docker-fleet-agent",
57+
"ephemeral_id": "d34469d9-73df-4f90-bc77-b13f8741e23d",
58+
"id": "6d931462-347a-49af-922d-b3918041d003",
59+
"name": "elastic-agent-53629",
6060
"type": "filebeat",
61-
"version": "8.12.2"
61+
"version": "8.19.4"
6262
},
6363
"data_stream": {
6464
"dataset": "lastpass.detailed_shared_folder",
65-
"namespace": "ep",
65+
"namespace": "88569",
6666
"type": "logs"
6767
},
6868
"ecs": {
6969
"version": "8.11.0"
7070
},
7171
"elastic_agent": {
72-
"id": "b0183e4b-ecd8-4ee9-8e73-bb43ce3ddcf2",
72+
"id": "6d931462-347a-49af-922d-b3918041d003",
7373
"snapshot": false,
74-
"version": "8.12.2"
74+
"version": "8.19.4"
7575
},
7676
"event": {
7777
"agent_id_status": "verified",
78-
"created": "2024-05-24T11:28:38.242Z",
78+
"created": "2025-12-12T08:59:20.423Z",
7979
"dataset": "lastpass.detailed_shared_folder",
80-
"ingested": "2024-05-24T11:28:50Z",
80+
"ingested": "2025-12-12T08:59:23Z",
8181
"kind": "state",
8282
"original": "{\"id\":\"101\",\"score\":99,\"sharedfoldername\":\"ThisSFName\",\"users\":{\"can_administer\":true,\"give\":false,\"readonly\":true,\"sites\":[\"aaa.com\",\"bbb.com\"],\"username\":\"[email protected]\"}}",
8383
"type": [
@@ -163,34 +163,34 @@ An example event for `event_report` looks as following:
163163
{
164164
"@timestamp": "2015-07-17T09:51:51.000Z",
165165
"agent": {
166-
"ephemeral_id": "9ece9bbd-9d6c-4204-bd9f-3182e1a55f27",
167-
"id": "02365282-f602-4b79-beec-adb210ac6467",
168-
"name": "docker-fleet-agent",
166+
"ephemeral_id": "cf014d99-eaa3-47af-b77d-5414873cbe35",
167+
"id": "d0222733-fe19-4c03-8713-959506dfed5b",
168+
"name": "elastic-agent-52217",
169169
"type": "filebeat",
170-
"version": "8.7.1"
170+
"version": "8.19.4"
171171
},
172172
"data_stream": {
173173
"dataset": "lastpass.event_report",
174-
"namespace": "ep",
174+
"namespace": "96245",
175175
"type": "logs"
176176
},
177177
"ecs": {
178178
"version": "8.11.0"
179179
},
180180
"elastic_agent": {
181-
"id": "02365282-f602-4b79-beec-adb210ac6467",
181+
"id": "d0222733-fe19-4c03-8713-959506dfed5b",
182182
"snapshot": false,
183-
"version": "8.7.1"
183+
"version": "8.19.4"
184184
},
185185
"event": {
186186
"action": "failed login attempt",
187187
"agent_id_status": "verified",
188188
"category": [
189189
"authentication"
190190
],
191-
"created": "2023-08-14T22:51:42.186Z",
191+
"created": "2025-12-12T09:00:10.654Z",
192192
"dataset": "lastpass.event_report",
193-
"ingested": "2023-08-14T22:51:43Z",
193+
"ingested": "2025-12-12T09:00:13Z",
194194
"kind": "event",
195195
"original": "{\"Action\":\"Failed Login Attempt\",\"Data\":\"\",\"IP_Address\":\"10.16.21.21\",\"Time\":\"2015-07-17 09:51:51\",\"Username\":\"[email protected]\",\"id\":\"Event1\"}",
196196
"outcome": "failure",
@@ -282,35 +282,35 @@ An example event for `user` looks as following:
282282

283283
```json
284284
{
285-
"@timestamp": "2023-07-24T13:40:43.764Z",
285+
"@timestamp": "2025-12-12T09:01:00.598Z",
286286
"agent": {
287-
"ephemeral_id": "7022fcec-d213-4320-8c7d-663b20b9d82c",
288-
"id": "e4c29d91-bbb7-42b8-80fd-85ddb56d2300",
289-
"name": "docker-fleet-agent",
287+
"ephemeral_id": "6352087b-6e4f-4918-9d95-5cc347bcfc31",
288+
"id": "ddf3533d-dabe-4e5e-b4f5-6dbcb12e6959",
289+
"name": "elastic-agent-91592",
290290
"type": "filebeat",
291-
"version": "8.8.2"
291+
"version": "8.19.4"
292292
},
293293
"data_stream": {
294294
"dataset": "lastpass.user",
295-
"namespace": "ep",
295+
"namespace": "64234",
296296
"type": "logs"
297297
},
298298
"ecs": {
299299
"version": "8.11.0"
300300
},
301301
"elastic_agent": {
302-
"id": "e4c29d91-bbb7-42b8-80fd-85ddb56d2300",
302+
"id": "ddf3533d-dabe-4e5e-b4f5-6dbcb12e6959",
303303
"snapshot": false,
304-
"version": "8.8.2"
304+
"version": "8.19.4"
305305
},
306306
"event": {
307307
"agent_id_status": "verified",
308308
"category": [
309309
"iam"
310310
],
311-
"created": "2023-07-24T13:40:43.764Z",
311+
"created": "2025-12-12T09:01:00.598Z",
312312
"dataset": "lastpass.user",
313-
"ingested": "2023-07-24T13:40:46Z",
313+
"ingested": "2025-12-12T09:01:03Z",
314314
"kind": "state",
315315
"original": "{\"admin\":false,\"applications\":0,\"attachments\":1,\"created\":\"2014-03-12 10:02:56\",\"disabled\":false,\"formfills\":2,\"fullname\":\"Ned Flanders\",\"groups\":[\"Domain Admins\",\"Dev Team\",\"Support Team\"],\"id\":\"101\",\"last_login\":\"2015-05-29 11:45:05\",\"last_pw_change\":\"2015-05-19 10:58:33\",\"linked\":\"[email protected]\",\"mpstrength\":\"100\",\"neverloggedin\":false,\"notes\":19,\"password_reset_required\":false,\"sites\":72,\"username\":\"[email protected]\"}",
316316
"type": [

packages/lastpass/manifest.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
format_version: "3.0.2"
22
name: lastpass
33
title: LastPass
4-
version: "1.20.0"
4+
version: "1.21.0"
55
description: Collect logs from LastPass with Elastic Agent.
66
type: integration
77
categories:
88
- security
99
- credential_management
1010
conditions:
1111
kibana:
12-
version: "^8.13.0 || ^9.0.0"
12+
version: "^8.19.4 || ~9.0.7 || ^9.1.4"
1313
elastic:
1414
subscription: basic
1515
screenshots:

0 commit comments

Comments
 (0)