Enhancement to load_balancer object (#1138)

#### Related Issue: N/A (from Slack) #### Description of changes: Added ip to the load_balancer object. Added Load Balancer to the endpoint type_id enum list. --------- Signed-off-by: Paul Agbabian <[email protected]> Signed-off-by: pagbabian-splunk <[email protected]> Signed-off-by: Rajas <[email protected]> Co-authored-by: pagbabian-splunk <[email protected]> Co-authored-by: Rajas <[email protected]>
ocsf · Jul 26, 2024 · e651e9d · e651e9d
1 parent c6f4371
commit e651e9d
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 3 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -84,8 +84,9 @@ Thankyou! -->
     7. Added `vendor_name`, `type`, `type_id` to object `package`. #1093
     8. Added `router`, `ids`, and `ips` entries to `type_id` enum in the `Endpoint` object. #1121
     9. Added `job` to `Evidence Artifacts` object. #1130
-    10. Added `cpe_name` and `hash` to `Software Package` object. #1142
-    11. Added `avg_timespan` to the `kb_article` object. #1125
+    10. Added `ip` to object `load_balancer`. #1138
+    11. Added `cpe_name` and `hash` to `Software Package` object. #1142
+    12. Added `avg_timespan` to the `kb_article` object. #1125
 * #### Platform Extensions
 
 ### Bugfixes

diff --git a/objects/endpoint.json b/objects/endpoint.json
@@ -123,6 +123,10 @@
         "14": {
           "caption": "IPS",
           "description": "An <a target='_blank' href='https://d3fend.mitre.org/dao/artifact/d3f:IntrusionPreventionSystem/'>intrusion prevention system</a>."
+        },
+       "15": {
+          "caption": "Load Balancer",
+          "description": "A <a target='_blank' href='https://en.wikipedia.org/wiki/Load_balancing_(computing)'> Load Balancer device."
         }
       },
       "requirement": "recommended"

diff --git a/objects/load_balancer.json b/objects/load_balancer.json
@@ -30,7 +30,11 @@
         "caption": "Classification",
         "description": "The request classification as defined by the load balancer.",
         "requirement": "optional"
-        },
+    },
+    "ip": {
+        "description": "The IP address of the load balancer node that handled the client request. Note: the load balancer may have other IP addresses, and this is not an IP address of the target/distribution endpoint - see <code>dst_endpoint</code>.",
+        "requirement": "optional"
+    }, 
     "status_detail": {
         "caption": "Status Detail",
         "description": "The status detail contains additional status information about the load balancer distribution event.",