panw_cortex_xdr: Fix CEL type conversion in alerts v2. (elastic#13007)

Fix CEL error: unsupported type conversion from 'int' to string

Author: kcreddy

packages/panw_cortex_xdr/changelog.yml

@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "2.1.1"
+  changes:
+    - description: Fix CEL type conversion in alerts v2.
+      type: bugfix
+      link: https://github.com/elastic/integrations/pull/13007
 - version: "2.1.0"
   changes:
     - description: Update Kibana constraint to support 9.0.0.

packages/panw_cortex_xdr/data_stream/alerts/agent/stream/cel.yml.hbs

@@ -54,17 +54,17 @@ program: |
         "auth": (string(state.api_token) + string(t.nonce) + string(t.timestamp)).sha256().hex(),
       })).as(h, req.with({
         "Header":{
-          "x-xdr-timestamp": [h.timestamp],
-          "x-xdr-nonce": [h.nonce],
-          "Authorization": [h.auth],
-          "x-xdr-auth-id": [state.token_id],
+          "x-xdr-timestamp": [string(h.timestamp)],
+          "x-xdr-nonce": [string(h.nonce)],
+          "Authorization": [string(h.auth)],
+          "x-xdr-auth-id": [string(state.token_id)],
         }
       }))
     :
       req.with({
         "Header":{
-          "Authorization": [state.api_token],
-          "x-xdr-auth-id": [state.token_id],
+          "Authorization": [string(state.api_token)],
+          "x-xdr-auth-id": [string(state.token_id)],
         }
       })
     ).do_request().as(resp, resp.StatusCode == 200 ?

packages/panw_cortex_xdr/manifest.yml

@@ -1,6 +1,6 @@
 name: panw_cortex_xdr
 title: Palo Alto Cortex XDR
-version: "2.1.0"
+version: "2.1.1"
 description: Collect logs from Palo Alto Cortex XDR with Elastic Agent.
 type: integration
 format_version: "3.0.2"