[Network Beaconing Identification] Add destination.ip filter to beaconing transform

packages/beaconing/changelog.yml

@@ -1,3 +1,8 @@
+- version: "1.3.3"
+  changes:
+    - description: Update documentation on configuring data view for dashboards
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/15672
 - version: "1.3.2"
   changes:
     - description: Update documentation on configuring data view for dashboards

packages/beaconing/elasticsearch/transform/pivot_transform/transform.yml

@@ -1,6 +1,6 @@
 dest:
-  index: ml_beaconing-1.3.2
-  pipeline: 1.3.2-ml_beaconing_ingest_pipeline
+  index: ml_beaconing-1.3.3
+  pipeline: 1.3.3-ml_beaconing_ingest_pipeline
   aliases:
     - alias: ml_beaconing.latest
       move_on_creation: true
@@ -358,6 +358,8 @@ source:
         - term:
             'event.category':
               value: network
+        - exists:
+            field: destination.ip
         - term:
             'event.action':
               value: disconnect_received
@@ -385,5 +387,5 @@ sync:
     delay: 120s
     field: "@timestamp"
 _meta:
-  fleet_transform_version: 1.2.3
+  fleet_transform_version: 1.2.4
   run_as_kibana_system: false

packages/beaconing/manifest.yml

@@ -1,7 +1,7 @@
 format_version: 3.0.0
 name: beaconing
 title: "Network Beaconing Identification"
-version: 1.3.2
+version: 1.3.3
 source:
   license: "Elastic-2.0"
 description: "Package to identify beaconing activity in your network events."