Skip to content

crowdstrike: add support for http proxy configuration for Event Streams API #15880

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 4 commits into
base: main
Choose a base branch
from
Open

crowdstrike: add support for http proxy configuration for Event Streams API #15880

wants to merge 4 commits into from
+43 −1

Conversation

@navnit-elastic
Copy link
Contributor

@navnit-elastic navnit-elastic commented Nov 6, 2025 •
edited
Loading

Proposed commit message

See title.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • [ ]

How to test this PR locally

Related issues

Screenshots

image

@navnit-elastic navnit-elastic self-assigned this Nov 6, 2025
@navnit-elastic navnit-elastic added enhancement New feature or request Integration:crowdstrike CrowdStrike Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Team:Sit-Crest Crest developers on the Security Integrations team [elastic/sit-crest-contractors] labels Nov 6, 2025
@navnit-elastic navnit-elastic force-pushed the crowdstrike-event-streams-proxy branch from 65f968e to c07fd81 Compare November 6, 2025 06:48
@elastic-vault-github-plugin-prod
Copy link

elastic-vault-github-plugin-prod bot commented Nov 6, 2025 •
edited
Loading

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@navnit-elastic navnit-elastic marked this pull request as ready for review November 6, 2025 08:27
@navnit-elastic navnit-elastic requested a review from a team as a code owner November 6, 2025 08:27
@elasticmachine
Copy link

elasticmachine commented Nov 6, 2025

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

kcreddy
kcreddy reviewed Nov 7, 2025
View reviewed changes
packages/crowdstrike/manifest.yml
title: Collect CrowdStrike Falcon Logs via Event Stream
description: Collecting CrowdStrike Falcon Logs via Event Stream.
vars:
- name: proxy_url
Copy link
Contributor

@kcreddy kcreddy Nov 7, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you also add proxy_headers

Copy link
Contributor Author

@navnit-elastic navnit-elastic Nov 7, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I was referring to the recent PRs and was wondering why we don't add headers configuration along with the URL.

Copy link
Member

@andrewkroh andrewkroh Nov 7, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do the other input types used throughout the Crowdstrike package also support proxy_headers (aws-s3, cel)? If so, then the other data streams' *.yml.hbs files should be updated to use proxy_headers.

Copy link
Contributor Author

@navnit-elastic navnit-elastic Nov 10, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@andrewkroh - added proxy_headers option for CEL in d23c43a.
The aws-s3 input doesn't mention support for it.

Copy link
Contributor

@kcreddy kcreddy Nov 10, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@navnit-elastic, please update PR title and changelog accordingly.

@elasticmachine
Copy link

elasticmachine commented Nov 10, 2025

💚 Build Succeeded

History

cc @navnit-elastic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@andrewkroh andrewkroh andrewkroh left review comments

@kcreddy kcreddy kcreddy approved these changes

Assignees

@navnit-elastic navnit-elastic

Labels

enhancement New feature or request Integration:crowdstrike CrowdStrike Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Team:Sit-Crest Crest developers on the Security Integrations team [elastic/sit-crest-contractors]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@navnit-elastic @elasticmachine @andrewkroh @kcreddy