preview tag added

Author: v-prasadboke

Solutions/Cisco Secure Endpoint/Data Connectors/CiscoSecureEndpointLogs_ccp/CiscoSecureEndpointLogs_ConnectorDefinition.json

@@ -7,7 +7,7 @@
     "properties": {
         "connectorUiConfig": {
             "id": "CiscoSecureEndpointLogsCCPDefinition",
-            "title": "Cisco Secure Endpoint (via Codeless Connector Framework)",
+            "title": "Cisco Secure Endpoint (via Codeless Connector Framework) (Preview)",
             "publisher": "Microsoft",
             "descriptionMarkdown": "The Cisco Secure Endpoint (formerly AMP for Endpoints) data connector provides the capability to ingest Cisco Secure Endpoint [audit logs](https://developer.cisco.com/docs/secure-endpoint/auditlog/) and [events](https://developer.cisco.com/docs/secure-endpoint/v1-api-reference-event/) into Microsoft Sentinel.",
             "graphQueries": [

Solutions/Cisco Secure Endpoint/Package/3.0.1.zip

@@ -1298,7 +1298,7 @@
       ],
       "properties": {
         "contentId": "[variables('_dataConnectorContentIdConnectorDefinition1')]",
-        "displayName": "Cisco Secure Endpoint (via Codeless Connector Framework)",
+        "displayName": "Cisco Secure Endpoint (via Codeless Connector Framework) (Preview)",
         "contentKind": "DataConnector",
         "mainTemplate": {
           "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
@@ -1315,7 +1315,7 @@
               "properties": {
                 "connectorUiConfig": {
                   "id": "CiscoSecureEndpointLogsCCPDefinition",
-                  "title": "Cisco Secure Endpoint (via Codeless Connector Framework)",
+                  "title": "Cisco Secure Endpoint (via Codeless Connector Framework) (Preview)",
                   "publisher": "Microsoft",
                   "descriptionMarkdown": "The Cisco Secure Endpoint (formerly AMP for Endpoints) data connector provides the capability to ingest Cisco Secure Endpoint [audit logs](https://developer.cisco.com/docs/secure-endpoint/auditlog/) and [events](https://developer.cisco.com/docs/secure-endpoint/v1-api-reference-event/) into Microsoft Sentinel.",
                   "graphQueries": [
@@ -2597,7 +2597,7 @@
       "properties": {
         "connectorUiConfig": {
           "id": "CiscoSecureEndpointLogsCCPDefinition",
-          "title": "Cisco Secure Endpoint (via Codeless Connector Framework)",
+          "title": "Cisco Secure Endpoint (via Codeless Connector Framework) (Preview)",
           "publisher": "Microsoft",
           "descriptionMarkdown": "The Cisco Secure Endpoint (formerly AMP for Endpoints) data connector provides the capability to ingest Cisco Secure Endpoint [audit logs](https://developer.cisco.com/docs/secure-endpoint/auditlog/) and [events](https://developer.cisco.com/docs/secure-endpoint/v1-api-reference-event/) into Microsoft Sentinel.",
           "graphQueries": [
@@ -2807,7 +2807,7 @@
       ],
       "properties": {
         "contentId": "[variables('_dataConnectorContentIdConnections1')]",
-        "displayName": "Cisco Secure Endpoint (via Codeless Connector Framework)",
+        "displayName": "Cisco Secure Endpoint (via Codeless Connector Framework) (Preview)",
         "contentKind": "ResourcesDataConnector",
         "mainTemplate": {
           "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
@@ -2822,7 +2822,7 @@
               "type": "securestring"
             },
             "connectorDefinitionName": {
-              "defaultValue": "Cisco Secure Endpoint (via Codeless Connector Framework)",
+              "defaultValue": "Cisco Secure Endpoint (via Codeless Connector Framework) (Preview)",
               "type": "securestring",
               "minLength": 1
             },
@@ -3231,19 +3231,15 @@
           "title": "[DEPRECATED] Cisco Secure Endpoint (AMP) (using Azure Functions)",
           "publisher": "Cisco",
           "descriptionMarkdown": "The Cisco Secure Endpoint (formerly AMP for Endpoints) data connector provides the capability to ingest Cisco Secure Endpoint [audit logs](https://api-docs.amp.cisco.com/api_resources/AuditLog?api_host=api.amp.cisco.com&api_version=v1) and [events](https://api-docs.amp.cisco.com/api_actions/details?api_action=GET+%2Fv1%2Fevents&api_host=api.amp.cisco.com&api_resource=Event&api_version=v1) into Microsoft Sentinel.\n\n<p><span style='color:red; font-weight:bold;'>NOTE</span>: This data connector has been deprecated, consider moving to the CCF data connector available in the solution which replaces ingestion via the <a href='https://learn.microsoft.com/en-us/azure/azure-monitor/logs/custom-logs-migrate' style='color:#1890F1;'>deprecated HTTP Data Collector API</a>.</p>",
-          "graphQueries": [
-            {
-              "metricName": "Cisco Secure Endpoint logs",
-              "legend": "CiscoSecureEndpoint_CL",
-              "baseQuery": "CiscoSecureEndpoint_CL"
-            }
-          ],
-          "dataTypes": [
-            {
-              "name": "CiscoSecureEndpoint_CL",
-              "lastDataReceivedQuery": "CiscoSecureEndpoint_CL\n            | summarize Time = max(TimeGenerated)\n            | where isnotempty(Time)"
-            }
-          ],
+          "graphQueries": {
+            "metricName": "Cisco Secure Endpoint logs",
+            "legend": "CiscoSecureEndpoint_CL",
+            "baseQuery": "CiscoSecureEndpoint_CL"
+          },
+          "dataTypes": {
+            "name": "CiscoSecureEndpoint_CL",
+            "lastDataReceivedQuery": "CiscoSecureEndpoint_CL\n            | summarize Time = max(TimeGenerated)\n            | where isnotempty(Time)"
+          },
           "connectivityCriterias": [
             {
               "type": "IsConnectedQuery",
@@ -3252,12 +3248,10 @@
               ]
             }
           ],
-          "sampleQueries": [
-            {
-              "description": "All Cisco Secure Endpoint logs",
-              "query": "CiscoSecureEndpoint_CL\n| sort by TimeGenerated desc"
-            }
-          ],
+          "sampleQueries": {
+            "description": "All Cisco Secure Endpoint logs",
+            "query": "CiscoSecureEndpoint_CL\n| sort by TimeGenerated desc"
+          },
           "availability": {
             "status": 1,
             "isPreview": false