AWS SecurityHub Connector does not ingest GuardDuty and Macie events present in SecurityHub

[CyberHunter7]

AWS SecurityHub Connector does not ingest GuardDuty and Macie events present in SecurityHub

[v-muuppugund]

Hi @CyberHunter7 , Thanks for flagging this issue, we will investigate this issue and get back to you with some updates by 26Mar24. Thanks!

[v-muuppugund]

Hi @CyberHunter7 ,Working on detailed analysis for further replication and changes,will update you

[CyberHunter7]

Hi @CyberHunter7 ,Working on detailed analysis for further replication and changes,will update you

Thank you @v-muuppugund for the update.

[v-muuppugund]

Hi @CyberHunter7 ,Still need some more time for completing the detailed analysis for this issue, will post update once done.

[v-muuppugund]

Hi @CyberHunter7 ,I am able to replicate the issue and the data is not ingested from guard duty in to AWS Security hub, we have done the complete analysis for this requirement and will be picking up in our queue and will update you once the changes have been completed.Please let me know if you have any questions we can have a detailed discussion on this requirement.

[CyberHunter7]

Hi @CyberHunter7 ,I am able to replicate the issue and the data is not ingested from guard duty in to AWS Security hub, we have done the complete analysis for this requirement and will be picking up in our queue and will update you once the changes have been completed.Please let me know if you have any questions we can have a detailed discussion on this requirement.

Hi @v-muuppugund thanks for the update, is there any workaround for the mean time ? is there an estimate when this issue will be resolved ?

[v-muuppugund]

Hi @CyberHunter7 ,I am able to replicate the issue and the data is not ingested from guard duty in to AWS Security hub, we have done the complete analysis for this requirement and will be picking up in our queue and will update you once the changes have been completed. Please let me know if you have any questions we can have a detailed discussion on this requirement.

Hi @v-muuppugund thanks for the update, is there any workaround for the mean time ? is there an estimate when this issue will be resolved ?

Hi @CyberHunter7 ,Apologies as of now ,with generated_id from guard duty and no filters the data is not coming up,Please find below screen shot for reference
even gaurd duty is enabled

Could you please check any logs are present in guard duty for the region using in AWS security hub connector

[CyberHunter7]

Hi @CyberHunter7 ,I am able to replicate the issue and the data is not ingested from guard duty in to AWS Security hub, we have done the complete analysis for this requirement and will be picking up in our queue and will update you once the changes have been completed. Please let me know if you have any questions we can have a detailed discussion on this requirement.

Hi @v-muuppugund thanks for the update, is there any workaround for the mean time ? is there an estimate when this issue will be resolved ?

Hi @CyberHunter7 ,Apologies as of now ,with generated_id from guard duty and no filters the data is not coming up,Please find below screen shot for reference even gaurd duty is enabled Could you please check any logs are present in guard duty for the region using in AWS security hub connector

Hi @v-muuppugund I checked again no logs are present. I understand there is no quick fix for this that can be available, is that correct ?

[CyberHunter7]

Hi @CyberHunter7 ,I am able to replicate the issue and the data is not ingested from guard duty in to AWS Security hub, we have done the complete analysis for this requirement and will be picking up in our queue and will update you once the changes have been completed. Please let me know if you have any questions we can have a detailed discussion on this requirement.

Hi @v-muuppugund thanks for the update, is there any workaround for the mean time ? is there an estimate when this issue will be resolved ?

Hi @CyberHunter7 ,Apologies as of now ,with generated_id from guard duty and no filters the data is not coming up,Please find below screen shot for reference even gaurd duty is enabled Could you please check any logs are present in guard duty for the region using in AWS security hub connector

Hi @v-muuppugund I checked again no logs are present. I understand there is no quick fix for this that can be available, is that correct ?

Hello @v-muuppugund any updates ?