Gravityzone solution v3.0.0

.github/workflows/arm-ttk-validations.yaml

@@ -20,7 +20,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
-          fetch-depth: 0
+          fetch-depth: 10
       - shell: pwsh
         id: step1
         name: Identify Changes in PR

.github/workflows/hyperlinkValidator.yaml

@@ -28,7 +28,7 @@ jobs:
         env:
           GeneratedToken: ${{ steps.generate_token.outputs.token }}
         with:
-          fetch-depth: 0
+          fetch-depth: 10
           token: ${{ env.GeneratedToken }}
       - shell: pwsh
         id: step1

.github/workflows/slash-command-armttk.yaml

@@ -46,7 +46,7 @@ jobs:
         if: steps.get-pr.outputs.is_fork == 'false'
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
-          fetch-depth: 0
+          fetch-depth: 10
           ref: ${{ steps.get-pr.outputs.head_sha }}
           persist-credentials: false
       - shell: pwsh

.github/workflows/update-solutions-analyzer.yml

@@ -55,23 +55,47 @@ jobs:
             echo "changed=true" >> $GITHUB_OUTPUT
           fi
 
-      - name: Commit and push changes
+      - name: Create Pull Request
         if: steps.check_changes.outputs.changed == 'true'
+        id: create_pr
+        uses: peter-evans/create-pull-request@v6
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          commit-message: 'chore: Update Solutions Analyzer CSV files and documentation'
+          branch: solutions-analyzer-update
+          delete-branch: true
+          title: 'chore: Update Solutions Analyzer CSV files and documentation'
+          body: |
+            ## Automated Solutions Analyzer Update
+
+            This PR contains automated updates to:
+            - Solutions connector-to-tables mapping CSV
+            - Solutions issues and exceptions report CSV
+            - Connector documentation files
+
+            Generated by the Solutions Analyzer workflow.
+
+            **Triggered by:** ${{ github.event_name }}
+            **Workflow run:** ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+          labels: automated, documentation
+          add-paths: |
+            Tools/Solutions Analyzer/solutions_connectors_tables_mapping.csv
+            Tools/Solutions Analyzer/solutions_connectors_tables_issues_and_exceptions_report.csv
+            Tools/Solutions Analyzer/connector-docs/
+
+      - name: Enable auto-merge
+        if: steps.check_changes.outputs.changed == 'true' && steps.create_pr.outputs.pull-request-number != ''
         run: |
-          git config --local user.email "github-actions[bot]@users.noreply.github.com"
-          git config --local user.name "github-actions[bot]"
-          git add "Tools/Solutions Analyzer/solutions_connectors_tables_mapping.csv"
-          git add "Tools/Solutions Analyzer/solutions_connectors_tables_issues_and_exceptions_report.csv"
-          git add "Tools/Solutions Analyzer/connector-docs/"
-          git commit -m "chore: Update Solutions Analyzer CSV files and documentation [skip ci]"
-          git push
+          gh pr merge ${{ steps.create_pr.outputs.pull-request-number }} --auto --squash
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Create summary
         if: steps.check_changes.outputs.changed == 'true'
         run: |
-          echo "### Solutions Analyzer Updated :white_check_mark:" >> $GITHUB_STEP_SUMMARY
+          echo "### Solutions Analyzer Pull Request Created :white_check_mark:" >> $GITHUB_STEP_SUMMARY
           echo "" >> $GITHUB_STEP_SUMMARY
-          echo "CSV files and documentation have been regenerated and committed." >> $GITHUB_STEP_SUMMARY
+          echo "A pull request has been created with updated CSV files and documentation." >> $GITHUB_STEP_SUMMARY
           echo "" >> $GITHUB_STEP_SUMMARY
           echo "**Modified files:**" >> $GITHUB_STEP_SUMMARY
           echo "- Tools/Solutions Analyzer/solutions_connectors_tables_mapping.csv" >> $GITHUB_STEP_SUMMARY

.script/tests/KqlvalidationsTests/CustomTables/Corelight_v2_conn_agg_CL.json

@@ -0,0 +1,285 @@
+{
+  "Name": "Corelight_v2_conn_agg_CL",
+  "Properties": [
+    {
+      "Name": "TimeGenerated",
+      "Type": "DateTime"
+    },
+    {
+      "Name": "_path_s",
+      "Type": "String"
+    },
+    {
+      "Name": "_system_name_s",
+      "Type": "String"
+    },
+    {
+      "Name": "_write_ts_t",
+      "Type": "DateTime"
+    },
+    {
+      "Name": "uid_s",
+      "Type": "String"
+    },
+    {
+      "Name": "id_orig_h_s",
+      "Type": "String"
+    },
+    {
+      "Name": "id_orig_p_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "id_resp_h_s",
+      "Type": "String"
+    },
+    {
+      "Name": "id_resp_p_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "proto_s",
+      "Type": "String"
+    },
+    {
+      "Name": "suri_ids_s",
+      "Type": "String"
+    },
+    {
+      "Name": "local_orig_b",
+      "Type": "Boolean"
+    },
+    {
+      "Name": "local_resp_b",
+      "Type": "Boolean"
+    },
+    {
+      "Name": "id_orig_h_n_s",
+      "Type": "String"
+    },
+    {
+      "Name": "id_resp_h_n_s",
+      "Type": "String"
+    },
+    {
+      "Name": "community_id_s",
+      "Type": "String"
+    },
+    {
+      "Name": "spcap_url_s",
+      "Type": "String"
+    },
+    {
+      "Name": "service_s",
+      "Type": "String"
+    },
+    {
+      "Name": "app_s",
+      "Type": "String"
+    },
+    {
+      "Name": "corelight_shunted_b",
+      "Type": "Boolean"
+    },
+    {
+      "Name": "duration_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "orig_bytes_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "resp_bytes_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "missed_bytes_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "orig_shunted_pkts_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "orig_shunted_bytes_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "resp_shunted_pkts_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "resp_shunted_bytes_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "orig_pkts_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "orig_ip_bytes_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "resp_pkts_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "resp_ip_bytes_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "conn_state_s",
+      "Type": "String"
+    },
+    {
+      "Name": "history_s",
+      "Type": "String"
+    },
+    {
+      "Name": "tunnel_parents_s",
+      "Type": "String"
+    },
+    {
+      "Name": "netskope_site_id_s",
+      "Type": "String"
+    },
+    {
+      "Name": "netskope_user_id_s",
+      "Type": "String"
+    },
+    {
+      "Name": "id_vlan_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "vlan_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "inner_vlan_d",
+      "Type": "Double"
+    },
+    {
+      "Name": "orig_inst_org_id_s",
+      "Type": "String"
+    },
+    {
+      "Name": "orig_inst_name_s",
+      "Type": "String"
+    },
+    {
+      "Name": "orig_inst_az_s",
+      "Type": "String"
+    },
+    {
+      "Name": "orig_inst_vpc_id_s",
+      "Type": "String"
+    },
+    {
+      "Name": "orig_inst_subnet_id_s",
+      "Type": "String"
+    },
+    {
+      "Name": "orig_inst_sg_ids_s",
+      "Type": "String"
+    },
+    {
+      "Name": "orig_inst_project_s",
+      "Type": "String"
+    },
+    {
+      "Name": "orig_inst_network_s",
+      "Type": "String"
+    },
+    {
+      "Name": "orig_inst_network_tags_s",
+      "Type": "String"
+    },
+    {
+      "Name": "orig_inst_id_s",
+      "Type": "String"
+    },
+    {
+      "Name": "orig_inst_resource_group_s",
+      "Type": "String"
+    },
+    {
+      "Name": "orig_inst_subscription_s",
+      "Type": "String"
+    },
+    {
+      "Name": "orig_inst_os_s",
+      "Type": "String"
+    },
+    {
+      "Name": "orig_inst_location_s",
+      "Type": "String"
+    },
+    {
+      "Name": "orig_inst_nsg_s",
+      "Type": "String"
+    },
+    {
+      "Name": "resp_inst_org_id_s",
+      "Type": "String"
+    },
+    {
+      "Name": "resp_inst_name_s",
+      "Type": "String"
+    },
+    {
+      "Name": "resp_inst_az_s",
+      "Type": "String"
+    },
+    {
+      "Name": "resp_inst_vpc_id_s",
+      "Type": "String"
+    },
+    {
+      "Name": "resp_inst_subnet_id_s",
+      "Type": "String"
+    },
+    {
+      "Name": "resp_inst_sg_ids_s",
+      "Type": "String"
+    },
+    {
+      "Name": "resp_inst_project_s",
+      "Type": "String"
+    },
+    {
+      "Name": "resp_inst_network_s",
+      "Type": "String"
+    },
+    {
+      "Name": "resp_inst_network_tags_s",
+      "Type": "String"
+    },
+    {
+      "Name": "resp_inst_id_s",
+      "Type": "String"
+    },
+    {
+      "Name": "resp_inst_resource_group_s",
+      "Type": "String"
+    },
+    {
+      "Name": "resp_inst_subscription_s",
+      "Type": "String"
+    },
+    {
+      "Name": "resp_inst_os_s",
+      "Type": "String"
+    },
+    {
+      "Name": "resp_inst_location_s",
+      "Type": "String"
+    },
+    {
+      "Name": "resp_inst_nsg_s",
+      "Type": "String"
+    }
+  ]
+}