Skip to content

Commit c91533b

Browse files
Mrudula-Oruganti-GigamonMrudula-Oruganti-Gigamon
committed
Made changes to the files as per latest KQL Failure
1 parent 86e0331 commit c91533b

File tree

6 files changed

+25
-24
lines changed

6 files changed

+25
-24
lines changed

‎Solutions/Gigamon Connector/Data Connectors/Gigamon_CCF/Gigamon_ConnectorDefinition.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
"properties": {
88
"connectorUiConfig": {
99
"id": "GigamonDefinition",
10-
"title": "Gigamon Telemetry Connector",
10+
"title": "Gigamon AMX Connector",
1111
"publisher": "GigamonDefinition",
1212
"descriptionMarkdown": "The Gigamon connector provides the capability to read raw event data from Gigamon in Microsoft Sentinel.",
1313
"graphQueries": [

Solutions/Gigamon Connector/Data Connectors/Connector_Analytics_Gigamon.json renamed to Solutions/Gigamon Connector/Data Connectors/Gigamon_CCF/Gigamon_Connector_Analytics_Gigamon.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"id": "GigamonDataConnector",
3-
"title": "Gigamon AMX Data Connector",
3+
"title": "Gigamon AMX Connector",
44
"publisher": "Gigamon",
55
"descriptionMarkdown": "Use this data connector to integrate with Gigamon Application Metadata Exporter (AMX) and get data sent directly to Microsoft Sentinel. ",
66
"graphQueries": [
@@ -60,7 +60,7 @@
6060
},
6161
"instructionSteps": [
6262
{
63-
"title": "Gigamon Data Connector",
63+
"title": "Gigamon AMX Connector",
6464
"description": "1. Application Metadata Exporter (AMX) application converts the output from the Application Metadata Intelligence (AMI) in CEF format into JSON format and sends it to the cloud tools and Kafka.\n 2. The AMX application can be deployed only on a V Series Node and can be connected to Application Metadata Intelligence running on a physical node or a virtual machine.\n 3. The AMX application and the AMI are managed by GigaVUE-FM. This application is supported on VMware ESXi, VMware NSX-T, AWS and Azure.\n ",
6565
"instructions": [
6666
{

‎Solutions/Gigamon Connector/Data Connectors/Gigamon_CCF/Gigamon_DCR.json‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -97,6 +97,7 @@
9797
{ "name": "total_packets", "type": "string" },
9898
{ "name": "ingress_vlan_id", "type": "string" },
9999
{ "name": "ip_ttl", "type": "string" },
100+
{ "name": "tcp_flags", "type": "string" },
100101
{ "name": "ip_hdr_len", "type": "string" },
101102
{ "name": "ip_frag_flags", "type": "string" },
102103
{ "name": "tcp_ack_id", "type": "string" },
@@ -119,11 +120,13 @@
119120
{ "name": "ip_wrong_crc", "type": "string" },
120121
{ "name": "dnp3_al_function_code", "type": "string" },
121122
{ "name": "dnp3_dl_function_code", "type": "string" },
123+
{ "name": "dnp3_dl_dir", "type": "string" },
122124
{ "name": "modbus_exception_code", "type": "string" },
123125
{ "name": "SSL_version", "type": "string" },
124126
{ "name": "http_code", "type": "string" },
125127
{ "name": "http_rtt", "type": "string" },
126128
{ "name": "tcp_rtt_app", "type": "string" },
129+
{ "name": "tcp_flag_reset", "type": "string" },
127130
{ "name": "dns_response_time", "type": "string" },
128131
{ "name": "http_content_encoding", "type": "string" },
129132
{ "name": "snmp_version", "type": "string" },

‎Solutions/Gigamon Connector/Data Connectors/Gigamon_CCF/Gigamon_table.json‎

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
{
2-
"name": "Gigamon_DCR",
2+
"name": "GigamonV2_CL",
33
"type": "Microsoft.OperationalInsights/workspaces/tables",
44
"apiVersion": "2022-10-01",
55
"tags": {},
66
"properties": {
77
"plan": "Analytics",
88
"schema": {
9-
"name": "Gigamon_DCR",
9+
"name": "GigamonV2_CL",
1010
"columns": [
1111
{ "name": "TimeGenerated", "type": "datetime" },
1212
{ "name": "RawData", "type": "string" },
@@ -98,6 +98,7 @@
9898
{ "name": "total_packets", "type": "string" },
9999
{ "name": "ingress_vlan_id", "type": "string" },
100100
{ "name": "ip_ttl", "type": "string" },
101+
{ "name": "tcp_flags", "type": "string" },
101102
{ "name": "ip_hdr_len", "type": "string" },
102103
{ "name": "ip_frag_flags", "type": "string" },
103104
{ "name": "tcp_ack_id", "type": "string" },
@@ -120,11 +121,13 @@
120121
{ "name": "ip_wrong_crc", "type": "string" },
121122
{ "name": "dnp3_al_function_code", "type": "string" },
122123
{ "name": "dnp3_dl_function_code", "type": "string" },
124+
{ "name": "dnp3_dl_dir", "type": "string" },
123125
{ "name": "modbus_exception_code", "type": "string" },
124126
{ "name": "SSL_version", "type": "string" },
125127
{ "name": "http_code", "type": "string" },
126128
{ "name": "http_rtt", "type": "string" },
127129
{ "name": "tcp_rtt_app", "type": "string" },
130+
{ "name": "tcp_flag_reset", "type": "string" },
128131
{ "name": "dns_response_time", "type": "string" },
129132
{ "name": "http_content_encoding", "type": "string" },
130133
{ "name": "snmp_version", "type": "string" },

‎Solutions/Gigamon Connector/Data/Solution_Gigamon.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
"Workbooks/Gigamon.json"
88
],
99
"Data Connectors": [
10-
"Data Connectors/Connector_Analytics_Gigamon.json",
10+
"Data Connectors/Gigamon_CCF/Gigamon_Connector_Analytics_Gigamon.json",
1111
"Data Connectors/Gigamon_CCF/Gigamon_ConnectorDefinition.json"
1212
],
1313
"BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\Gigamon Connector",

‎Solutions/Gigamon Connector/Package/mainTemplate.json‎

Lines changed: 13 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -105,7 +105,7 @@
105105
"kind": "shared",
106106
"apiVersion": "2021-08-01",
107107
"metadata": {
108-
"description": "A visualized overview of Gigamon AMX Data Connector .\nExplore, analize and learn about your security posture using Gigamon AMX data connector Overview."
108+
"description": "A visualized overview of Gigamon AMX Connector .\nExplore, analize and learn about your security posture using Gigamon AMX Connector Overview."
109109
},
110110
"properties": {
111111
"displayName": "[parameters('workbook1-name')]",
@@ -120,7 +120,7 @@
120120
"apiVersion": "2022-01-01-preview",
121121
"name": "[concat(parameters('workspace'),'/Microsoft.SecurityInsights/',concat('Workbook-', last(split(variables('workbookId1'),'/'))))]",
122122
"properties": {
123-
"description": "@{workbookKey=GigamonConnector; logoFileName=gigamon.svg; description=A visualized overview of Gigamon AMX Data Connector .\nExplore, analize and learn about your security posture using Gigamon AMX data connector Overview.; dataTypesDependencies=System.Object[]; dataConnectorsDependencies=System.Object[]; previewImagesFileNames=System.Object[]; version=1.0.0; title=Gigamon Workbook; templateRelativePath=Gigamon.json; subtitle=; provider=Gigamon}.description",
123+
"description": "@{workbookKey=GigamonConnector; logoFileName=gigamon.svg; description=A visualized overview of Gigamon AMX Connector .\nExplore, analize and learn about your security posture using Gigamon AMX Connector Overview.; dataTypesDependencies=System.Object[]; dataConnectorsDependencies=System.Object[]; previewImagesFileNames=System.Object[]; version=1.0.0; title=Gigamon Workbook; templateRelativePath=Gigamon.json; subtitle=; provider=Gigamon}.description",
124124
"parentId": "[variables('workbookId1')]",
125125
"contentId": "[variables('_workbookContentId1')]",
126126
"kind": "Workbook",
@@ -193,7 +193,7 @@
193193
"properties": {
194194
"connectorUiConfig": {
195195
"id": "[variables('_uiConfigId1')]",
196-
"title": "Gigamon AMX Data Connector",
196+
"title": "Gigamon AMX Connector",
197197
"publisher": "Gigamon",
198198
"descriptionMarkdown": "Use this data connector to integrate with Gigamon Application Metadata Exporter (AMX) and get data sent directly to Microsoft Sentinel. ",
199199
"graphQueries": [
@@ -329,7 +329,7 @@
329329
"contentSchemaVersion": "3.0.0",
330330
"contentId": "[variables('_dataConnectorContentId1')]",
331331
"contentKind": "DataConnector",
332-
"displayName": "Gigamon AMX Data Connector",
332+
"displayName": "Gigamon AMX Connector",
333333
"contentProductId": "[variables('_dataConnectorcontentProductId1')]",
334334
"id": "[variables('_dataConnectorcontentProductId1')]",
335335
"version": "[variables('dataConnectorVersion1')]"
@@ -371,7 +371,7 @@
371371
"kind": "GenericUI",
372372
"properties": {
373373
"connectorUiConfig": {
374-
"title": "Gigamon AMX Data Connector",
374+
"title": "Gigamon AMX Connector",
375375
"publisher": "Gigamon",
376376
"descriptionMarkdown": "Use this data connector to integrate with Gigamon Application Metadata Exporter (AMX) and get data sent directly to Microsoft Sentinel. ",
377377
"graphQueries": [
@@ -469,7 +469,7 @@
469469
],
470470
"properties": {
471471
"contentId": "[variables('_dataConnectorContentIdConnectorDefinition2')]",
472-
"displayName": "Gigamon Telemetry Connector",
472+
"displayName": "Gigamon AMX Connector",
473473
"contentKind": "DataConnector",
474474
"mainTemplate": {
475475
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
@@ -486,7 +486,7 @@
486486
"properties": {
487487
"connectorUiConfig": {
488488
"id": "GigamonTelemetry",
489-
"title": "Gigamon Telemetry Connector",
489+
"title": "Gigamon AMX Connector",
490490
"publisher": "GigamonTelemetry",
491491
"descriptionMarkdown": "The Gigamon connector provides the capability to read raw event data from Gigamon in Microsoft Sentinel.",
492492
"graphQueries": [
@@ -784,6 +784,7 @@
784784
{ "name": "total_packets", "type": "string" },
785785
{ "name": "ingress_vlan_id", "type": "string" },
786786
{ "name": "ip_ttl", "type": "string" },
787+
{ "name": "tcp_flags", "type": "string" },
787788
{ "name": "ip_hdr_len", "type": "string" },
788789
{ "name": "ip_frag_flags", "type": "string" },
789790
{ "name": "tcp_ack_id", "type": "string" },
@@ -806,11 +807,13 @@
806807
{ "name": "ip_wrong_crc", "type": "string" },
807808
{ "name": "dnp3_al_function_code", "type": "string" },
808809
{ "name": "dnp3_dl_function_code", "type": "string" },
810+
{ "name": "dnp3_dl_dir", "type": "string" },
809811
{ "name": "modbus_exception_code", "type": "string" },
810812
{ "name": "SSL_version", "type": "string" },
811813
{ "name": "http_code", "type": "string" },
812814
{ "name": "http_rtt", "type": "string" },
813815
{ "name": "tcp_rtt_app", "type": "string" },
816+
{ "name": "tcp_flag_reset", "type": "string" },
814817
{ "name": "dns_response_time", "type": "string" },
815818
{ "name": "http_content_encoding", "type": "string" },
816819
{ "name": "snmp_version", "type": "string" },
@@ -913,7 +916,6 @@
913916
{ "name": "ssl_key_share_group", "type": "string" },
914917
{ "name": "ssl_fingerprint_ja3_full", "type": "string" },
915918
{ "name": "ssl_fingerprint_ja3s_full", "type": "string" },
916-
{ "name": "tcp_flags", "type": "string" },
917919
{ "name": "ssl_common_name", "type": "string" },
918920
{ "name": "ssl_issuer", "type": "string" },
919921
{ "name": "ssl_validity_not_before", "type": "string" },
@@ -948,7 +950,6 @@
948950
{ "name": "total_packets", "type": "string" },
949951
{ "name": "ingress_vlan_id", "type": "string" },
950952
{ "name": "ip_ttl", "type": "string" },
951-
{ "name": "tcp_flags", "type": "string" },
952953
{ "name": "ip_hdr_len", "type": "string" },
953954
{ "name": "ip_frag_flags", "type": "string" },
954955
{ "name": "tcp_ack_id", "type": "string" },
@@ -972,19 +973,13 @@
972973
{ "name": "dnp3_invalid_codes", "type": "string" },
973974
{ "name": "dnp3_al_function_code", "type": "string" },
974975
{ "name": "dnp3_dl_function_code", "type": "string" },
975-
{ "name": "dnp3_dl_dir", "type": "string" },
976-
{ "name": "dnp3_invalid_codes", "type": "string" },
977-
{ "name": "dnp3_dl_dir", "type": "string" },
978-
{ "name": "modbus_function_code", "type": "string" },
979976
{ "name": "modbus_function_code", "type": "string" },
980977
{ "name": "modbus_exception_code", "type": "string" },
981978
{ "name": "SSL_version", "type": "string" },
982979
{ "name": "http_code", "type": "string" },
983980
{ "name": "http_rtt", "type": "string" },
984981
{ "name": "tcp_rtt_app", "type": "string" },
985-
{ "name": "tcp_flag_reset", "type": "string" },
986982
{ "name": "dns_response_time", "type": "string" },
987-
{ "name": "tcp_flag_reset", "type": "string" },
988983
{ "name": "http_content_encoding", "type": "string" },
989984
{ "name": "snmp_version", "type": "string" },
990985
{ "name": "smb_version", "type": "string" },
@@ -1017,7 +1012,7 @@
10171012
"properties": {
10181013
"connectorUiConfig": {
10191014
"id": "GigamonTelemetry",
1020-
"title": "Gigamon Telemetry Connector",
1015+
"title": "Gigamon AMX Connector",
10211016
"publisher": "GigamonTelemetry",
10221017
"descriptionMarkdown": "The Gigamon connector provides the capability to read raw event data from Gigamon in Microsoft Sentinel.",
10231018
"graphQueries": [
@@ -1225,7 +1220,7 @@
12251220
],
12261221
"properties": {
12271222
"contentId": "[variables('_dataConnectorContentIdConnections2')]",
1228-
"displayName": "Gigamon Telemetry Connector",
1223+
"displayName": "Gigamon AMX Connector",
12291224
"contentKind": "ResourcesDataConnector",
12301225
"mainTemplate": {
12311226
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
@@ -1247,7 +1242,7 @@
12471242
}
12481243
},
12491244
"connectorDefinitionName": {
1250-
"defaultValue": "Gigamon Telemetry Connector",
1245+
"defaultValue": "Gigamon AMX Connector",
12511246
"type": "securestring",
12521247
"minLength": 1
12531248
},

0 commit comments

Comments
 (0)