Skip to content

SecOps & SecurityLake Fixes

We fixed two bugs in the to_google_secops and to_amazon_security_lake operators.

Download the release on GitHub.

The to_google_secops operator failed assertions when a batch of data was missing log_type or if no input was received for longer than batch_timeout.

By @raxyte in #5411.

Fixed handling of time in to_amazon_security_lake

Section titled “Fixed handling of time in to_amazon_security_lake”

Previously events with a null value for the OCSF time field would incorrectly be written to some partition in the lake. In rare circumstances, this could also cause a crash.

The operator now correctly skips events without a valid time.

By @IyeOnline in #5409.

Last updated: