Skip to content

Conversation

@kcreddy
Copy link
Contributor

@kcreddy kcreddy commented Dec 11, 2025

Proposed commit message

The "tenable_sc.vulnerability.plugin.text" field stores several 
details of vulnerable packages found on the host. It is currently 
mapped to "keyword". It can grow larger than maximum "ignore_above" 
limit of keywordfields, making it unusable in searches.

This PR updates the data type of "tenable_sc.vulnerability.plugin.text" 
field to "match_only_text" to allow searches on this field.

This is a breaking-change because the data types "keyword" and 
"match_only_text" are from different family [1] and could break 
users' custom Kibana dashboards or queries.

[1] https://www.elastic.co/docs/reference/elasticsearch/mapping-reference/field-data-types

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Screenshots

Before

Screenshot 2025-12-11 at 6 05 15 PM

After

Screenshot 2025-12-11 at 5 58 29 PM

@kcreddy kcreddy self-assigned this Dec 11, 2025
@kcreddy kcreddy added Integration:tenable_sc Tenable Security Center bugfix Pull request that fixes a bug issue Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] labels Dec 11, 2025
@kcreddy kcreddy marked this pull request as ready for review December 11, 2025 12:43
@kcreddy kcreddy requested a review from a team as a code owner December 11, 2025 12:43
@elasticmachine
Copy link

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@andrewkroh andrewkroh added the documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. label Dec 11, 2025
@elasticmachine
Copy link

💚 Build Succeeded

cc @kcreddy

@kcreddy kcreddy merged commit 2f19a2d into elastic:main Dec 12, 2025
7 checks passed
@elastic-vault-github-plugin-prod

Package tenable_sc - 2.0.0 containing this change is available at https://epr.elastic.co/package/tenable_sc/2.0.0/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

breaking change bugfix Pull request that fixes a bug issue documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. Integration:tenable_sc Tenable Security Center Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants