Skip to content

Commit 7513d2a

Browse files
Srikar ShastrySrikar Shastry
authored andcommitted
[SnowflakeConnector] - resolved bug in CCF Data Connector related to Output stream for Snowflake tables
1 parent 1ed870c commit 7513d2a

File tree

8 files changed

+139
-127
lines changed

8 files changed

+139
-127
lines changed

Solutions/Snowflake/Data Connectors/SnowflakeLogs_ccp/SnowflakeLogs_ConnectorDefinition.json

Lines changed: 10 additions & 10 deletions
Large diffs are not rendered by default.

Solutions/Snowflake/Data Connectors/SnowflakeLogs_ccp/SnowflakeLogs_DCR.json

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -104,7 +104,7 @@
104104
"clv2ws1"
105105
],
106106
"outputStream": "Custom-SnowflakeLoad_CL",
107-
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now()\r\n| where Data !contains \"[]\"\r\n| project TimeGenerated, Data"
107+
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\"\r\n| project TimeGenerated, Data"
108108
},
109109
{
110110
"streams": [
@@ -114,7 +114,7 @@
114114
"clv2ws1"
115115
],
116116
"outputStream": "Custom-SnowflakeLogin_CL",
117-
"transformKql": "source\r\n| extend Data = tostring(data), TimeGenerated = now()\r\n| where Data !contains \"[]\"\r\n| project TimeGenerated, Data"
117+
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\"\r\n| project TimeGenerated, Data"
118118
},
119119
{
120120
"streams": [
@@ -124,7 +124,7 @@
124124
"clv2ws1"
125125
],
126126
"outputStream": "Custom-SnowflakeMaterializedView_CL",
127-
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\" \r\n| project TimeGenerated, Data"
127+
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\"\r\n| project TimeGenerated, Data"
128128
},
129129
{
130130
"streams": [
@@ -134,7 +134,7 @@
134134
"clv2ws1"
135135
],
136136
"outputStream": "Custom-SnowflakeQuery_CL",
137-
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\" \r\n| project TimeGenerated, Data"
137+
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\"\r\n| project TimeGenerated, Data"
138138
},
139139
{
140140
"streams": [
@@ -144,7 +144,7 @@
144144
"clv2ws1"
145145
],
146146
"outputStream": "Custom-SnowflakeRoleGrant_CL",
147-
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\" \r\n| project TimeGenerated, Data"
147+
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\"\r\n| project TimeGenerated, Data"
148148
},
149149
{
150150
"streams": [
@@ -154,7 +154,7 @@
154154
"clv2ws1"
155155
],
156156
"outputStream": "Custom-SnowflakeRoles_CL",
157-
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\" \r\n| project TimeGenerated, Data"
157+
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\"\r\n| project TimeGenerated, Data"
158158
},
159159
{
160160
"streams": [
@@ -163,8 +163,8 @@
163163
"destinations": [
164164
"clv2ws1"
165165
],
166-
"outputStream": "Custom-SnowflakeTable_CL",
167-
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\" \r\n| project TimeGenerated, Data"
166+
"outputStream": "Custom-SnowflakeTables_CL",
167+
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\"\r\n| project TimeGenerated, Data"
168168
},
169169
{
170170
"streams": [
@@ -174,7 +174,7 @@
174174
"clv2ws1"
175175
],
176176
"outputStream": "Custom-SnowflakeTableStorageMetrics_CL",
177-
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\" \r\n| project TimeGenerated, Data"
177+
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\"\r\n| project TimeGenerated, Data"
178178
},
179179
{
180180
"streams": [
@@ -184,7 +184,7 @@
184184
"clv2ws1"
185185
],
186186
"outputStream": "Custom-SnowflakeUserGrant_CL",
187-
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\" \r\n| project TimeGenerated, Data"
187+
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\"\r\n| project TimeGenerated, Data"
188188
},
189189
{
190190
"streams": [
@@ -194,7 +194,7 @@
194194
"clv2ws1"
195195
],
196196
"outputStream": "Custom-SnowflakeUsers_CL",
197-
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\" \r\n| project TimeGenerated, Data"
197+
"transformKql": "source \r\n| extend Data = tostring(data), TimeGenerated = now() \r\n| where Data !contains \"[]\"\r\n| project TimeGenerated, Data"
198198
}
199199
]
200200
}

Solutions/Snowflake/Data Connectors/SnowflakeLogs_ccp/SnowflakeLogs_PollingConfig.json

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@
4141
"linkHeaderTokenJsonPath": "[[concat('https://',parameters('accountId'),'.snowflakecomputing.com','$.statementStatusUrl')]"
4242
},
4343
"connectorDefinitionName": "SnowflakeLogsCCPDefinition",
44-
"dataType": "SnowflakeLoad",
44+
"dataType": "SnowflakeLoad_CL",
4545
"dcrConfig": {
4646
"streamName": "Custom-SnowflakeLoad",
4747
"dataCollectionEndpoint": "{{dataCollectionEndpoint}}",
@@ -94,7 +94,7 @@
9494
"linkHeaderTokenJsonPath": "[[concat('https://',parameters('accountId'),'.snowflakecomputing.com','$.statementStatusUrl')]"
9595
},
9696
"connectorDefinitionName": "SnowflakeLogsCCPDefinition",
97-
"dataType": "SnowflakeLogin",
97+
"dataType": "SnowflakeLogin_CL",
9898
"dcrConfig": {
9999
"streamName": "Custom-SnowflakeLogin",
100100
"dataCollectionEndpoint": "{{dataCollectionEndpoint}}",
@@ -147,7 +147,7 @@
147147
"linkHeaderTokenJsonPath": "[[concat('https://',parameters('accountId'),'.snowflakecomputing.com','$.statementStatusUrl')]"
148148
},
149149
"connectorDefinitionName": "SnowflakeLogsCCPDefinition",
150-
"dataType": "SnowflakeMaterializedView",
150+
"dataType": "SnowflakeMaterializedView_CL",
151151
"dcrConfig": {
152152
"streamName": "Custom-SnowflakeMaterializedView",
153153
"dataCollectionEndpoint": "{{dataCollectionEndpoint}}",
@@ -200,7 +200,7 @@
200200
"linkHeaderTokenJsonPath": "[[concat('https://',parameters('accountId'),'.snowflakecomputing.com','$.statementStatusUrl')]"
201201
},
202202
"connectorDefinitionName": "SnowflakeLogsCCPDefinition",
203-
"dataType": "SnowflakeQuery",
203+
"dataType": "SnowflakeQuery_CL",
204204
"dcrConfig": {
205205
"streamName": "Custom-SnowflakeQuery",
206206
"dataCollectionEndpoint": "{{dataCollectionEndpoint}}",
@@ -253,7 +253,7 @@
253253
"linkHeaderTokenJsonPath": "[[concat('https://',parameters('accountId'),'.snowflakecomputing.com','$.statementStatusUrl')]"
254254
},
255255
"connectorDefinitionName": "SnowflakeLogsCCPDefinition",
256-
"dataType": "SnowflakeRoleGrant",
256+
"dataType": "SnowflakeRoleGrant_CL",
257257
"dcrConfig": {
258258
"streamName": "Custom-SnowflakeRoleGrant",
259259
"dataCollectionEndpoint": "{{dataCollectionEndpoint}}",
@@ -306,7 +306,7 @@
306306
"linkHeaderTokenJsonPath": "[[concat('https://',parameters('accountId'),'.snowflakecomputing.com','$.statementStatusUrl')]"
307307
},
308308
"connectorDefinitionName": "SnowflakeLogsCCPDefinition",
309-
"dataType": "SnowflakeRoles",
309+
"dataType": "SnowflakeRoles_CL",
310310
"dcrConfig": {
311311
"streamName": "Custom-SnowflakeRoles",
312312
"dataCollectionEndpoint": "{{dataCollectionEndpoint}}",
@@ -320,7 +320,7 @@
320320
{
321321
"type": "Microsoft.SecurityInsights/dataConnectors",
322322
"apiVersion": "2025-03-01",
323-
"name": "SnowflakeTablePoller",
323+
"name": "SnowflakeTablesPoller",
324324
"location": "[parameters('workspace-location')]",
325325
"kind": "RestApiPoller",
326326
"properties": {
@@ -359,7 +359,7 @@
359359
"linkHeaderTokenJsonPath": "[[concat('https://',parameters('accountId'),'.snowflakecomputing.com','$.statementStatusUrl')]"
360360
},
361361
"connectorDefinitionName": "SnowflakeLogsCCPDefinition",
362-
"dataType": "SnowflakeTable",
362+
"dataType": "SnowflakeTables_CL",
363363
"dcrConfig": {
364364
"streamName": "Custom-SnowflakeTable",
365365
"dataCollectionEndpoint": "{{dataCollectionEndpoint}}",
@@ -412,7 +412,7 @@
412412
"linkHeaderTokenJsonPath": "[[concat('https://',parameters('accountId'),'.snowflakecomputing.com','$.statementStatusUrl')]"
413413
},
414414
"connectorDefinitionName": "SnowflakeLogsCCPDefinition",
415-
"dataType": "SnowflakeTableStorageMetrics",
415+
"dataType": "SnowflakeTableStorageMetrics_CL",
416416
"dcrConfig": {
417417
"streamName": "Custom-SnowflakeTableStorageMetrics",
418418
"dataCollectionEndpoint": "{{dataCollectionEndpoint}}",
@@ -465,7 +465,7 @@
465465
"linkHeaderTokenJsonPath": "[[concat('https://',parameters('accountId'),'.snowflakecomputing.com','$.statementStatusUrl')]"
466466
},
467467
"connectorDefinitionName": "SnowflakeLogsCCPDefinition",
468-
"dataType": "SnowflakeUserGrant",
468+
"dataType": "SnowflakeUserGrant_CL",
469469
"dcrConfig": {
470470
"streamName": "Custom-SnowflakeUserGrant",
471471
"dataCollectionEndpoint": "{{dataCollectionEndpoint}}",
@@ -518,7 +518,7 @@
518518
"linkHeaderTokenJsonPath": "[[concat('https://',parameters('accountId'),'.snowflakecomputing.com','$.statementStatusUrl')]"
519519
},
520520
"connectorDefinitionName": "SnowflakeLogsCCPDefinition",
521-
"dataType": "SnowflakeUsers",
521+
"dataType": "SnowflakeUsers_CL",
522522
"dcrConfig": {
523523
"streamName": "Custom-SnowflakeUsers",
524524
"dataCollectionEndpoint": "{{dataCollectionEndpoint}}",

Solutions/Snowflake/Data/Solution_Snowflake.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@
3838
],
3939
"Metadata": "SolutionMetadata.json",
4040
"BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\Snowflake",
41-
"Version": "3.0.6",
41+
"Version": "3.0.7",
4242
"TemplateSpec": true,
4343
"Is1PConnector": false
4444
}
37.5 KB
Binary file not shown.

0 commit comments

Comments
 (0)