You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/dragos-source.md
+11-9Lines changed: 11 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ title: Dragos Source
4
4
sidebar_label: Dragos
5
5
tags:
6
6
- Dragos
7
-
description: Collect address, asset, vulnerability, and zone details from the Dragos API and send them to Sumo Logic.
7
+
description: Collect address, asset, vulnerability, notification, and zone details from the Dragos API and send them to Sumo Logic.
8
8
---
9
9
import CodeBlock from '@theme/CodeBlock';
10
10
import ExampleJSON from '/files/c2c/dragos/example.json';
@@ -17,13 +17,14 @@ import useBaseUrl from '@docusaurus/useBaseUrl';
17
17
Dragos is a cybersecurity platform with an ecosystem tailored for industrial environments, including Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA), Distributed Control System (DCS), and Operational Technology (OT) environments.
18
18
Dragos's Operational Technology (OT) offers clear visibility into your Industrial Control System (ICS) assets and communications. It monitors networks, detects threats, and addresses vulnerabilities without causing disruptions or shutdowns, helping you respond confidently to potential threats.
19
19
20
-
The Dragos source collects address, asset, vulnerability, and zone details from the Dragos API and sends it to Sumo Logic for streamlined analysis.
20
+
The Dragos source collects address, asset, vulnerability, notification, and zone details from the Dragos API and sends it to Sumo Logic for streamlined analysis.
21
21
22
22
## Data collected
23
23
24
24
| Polling Interval | Data |
25
25
| :--- | :--- |
26
-
| 5 minutes | Vulnerability |
26
+
| 5 minutes | Vulnerabilities |
27
+
| 5 minutes | Notifications |
27
28
| 24 hours | Addresses |
28
29
| 24 hours | Zones |
29
30
| 24 hours | Assets |
@@ -89,15 +90,16 @@ Sources can be configured using UTF-8 encoded JSON files with the Collector Ma
89
90
| requestEndpoint | String | Yes |`null`| The API URL to fetch the data from the Dragos log source. |`https://sumologic-dragos.cxc.dragos.cloud/`|
90
91
| apiID | String | Yes |`null`| API ID of your account for authorization. |`036fxxxx-b642-xxxx-99d3-fcxxxx2exxxx`|
91
92
| apiSecret | String | Yes |`null`| API Secret of your account for authorization. |`xxxU1TxxxxxxxxKSJwHYOpK37xxxxxxxxrEHAkU91xxxxxxxxxFrrJ06xxx`|
92
-
| pollingIntervalVulnerabilityMin | String | Yes |`5 minutes`| Time interval (in minutes) after which the source will check for new data for API.<br/>**Default**: 5 minutess <br/>**Minimum**: 5 minutes<br/>**Maximum**: 60 minutes ||
93
+
| pollingIntervalVulnerabilityMin | String | Yes |`5 minutes`| Time interval (in minutes) after which the source will check for new data for API.<br/>**Default**: 5 minutes <br/>**Minimum**: 5 minutes<br/>**Maximum**: 60 minutes ||
93
94
| pollingIntervalAddressesHour | String | Yes |`24 hours`| Time interval (in hours) after which the source will check for new data for API.<br/>**Default**: 24 hours<br/>**Minimum**: 12 hours<br/>**Maximum**: 24 hours ||
94
95
| pollingIntervalZonesHour | String | Yes |`24 hours`| Time interval (in hours) after which the source will check for new data for API.<br/>**Default**: 24 hours<br/>**Minimum**: 12 hours<br/>**Maximum**: 24 hours ||
95
96
| pollingIntervalAssetsHour | String | Yes |`24 hours`| Time interval (in hours) after which the source will check for new data for API.<br/>**Default**: 24 hours<br/>**Minimum**: 12 hours<br/>**Maximum**: 24 hours ||
96
-
| collectAddressDetails | Boolean | No |`True`| Specify if you need to collect the address details. ||
97
-
| collectZoneDetails | Boolean | No |`True`| Specify if you need to collect the zone details. ||
98
-
| collectDeviceDetails | Boolean | No |`True`| Specify if you need to collect the assets details. ||
99
-
| collectVulnerabilityDetails | Boolean | No |`True`| Specify if you need to collect the vulnerability details. ||
100
-
97
+
| pollingIntervalNotificationMin | String | Yes |`5 minutes`| Time interval (in minutes) after which the source will check for new data for API.<br/>**Default**: 5 minutes <br/>**Minimum**: 5 minutes<br/>**Maximum**: 60 minutes ||
98
+
| collectAddressDetails | Boolean | No |`False`| Specify if you need to collect the address details. ||
99
+
| collectZoneDetails | Boolean | No |`False`| Specify if you need to collect the zone details. ||
100
+
| collectDeviceDetails | Boolean | No |`False`| Specify if you need to collect the assets details. ||
101
+
| collectVulnerabilityDetails | Boolean | No |`False`| Specify if you need to collect the vulnerability details. ||
102
+
| collectNotificationDetails | Boolean | No |`False`| Specify if you need to collect the notification details. ||
0 commit comments