Skip to content

[cisco_ise] Extract av-pairs into attributes mapping #16312

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Draft
taylor-swanson wants to merge 1 commit into
base: main
Choose a base branch
from
Draft

[cisco_ise] Extract av-pairs into attributes mapping #16312

taylor-swanson wants to merge 1 commit into from
+997 −32

Conversation

@taylor-swanson
Copy link
Contributor

@taylor-swanson taylor-swanson commented Dec 4, 2025 •
edited
Loading

Proposed commit message

  • Extract cisco-av-pairs into attributes mapping, which is disabled by default to avoid issues with field explosions.
  • Existing cisco_av_pair mappings are left unmodified
  • Add pipeline test for passed authentications.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
    - [ ] I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

cd packages/cisco_ise
elastic-package test

Related issues

@taylor-swanson taylor-swanson self-assigned this Dec 4, 2025
@taylor-swanson taylor-swanson added enhancement New feature or request Integration:cisco_ise Cisco ISE Team:Integration-Experience Security Integrations Integration Experience [elastic/integration-experience] labels Dec 4, 2025
@taylor-swanson taylor-swanson force-pushed the enhance/cisco-ise-avpair branch from 5c1aa8c to b19a144 Compare December 15, 2025 15:38
@taylor-swanson
[cisco_ise] Extract av-pairs into attributes mapping
49af2f6 
- Extract cisco-av-pairs into attributes mapping, which is disabled by default
to avoid issues with field explosions.
- Existing cisco_av_pair mappings are left unmodified
- Add pipeline test for passed authentications.
@taylor-swanson taylor-swanson force-pushed the enhance/cisco-ise-avpair branch from b19a144 to 49af2f6 Compare December 15, 2025 16:18
@elasticmachine
Copy link

elasticmachine commented Dec 15, 2025

💚 Build Succeeded

History

cc @taylor-swanson

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@taylor-swanson taylor-swanson

Labels

enhancement New feature or request Integration:cisco_ise Cisco ISE Team:Integration-Experience Security Integrations Integration Experience [elastic/integration-experience]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

cisco_ise CISE_Passed_Authentications parsing error

2 participants

@taylor-swanson @elasticmachine