Skip to content

Commit 377d60f

Browse files
authored
CONN-4040: Updated Dragos C2C doc with new endpoint (#4948)
1 parent 49ae2f8 commit 377d60f

File tree

4 files changed

+16
-12
lines changed

4 files changed

+16
-12
lines changed

docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/dragos-source.md

Lines changed: 11 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ title: Dragos Source
44
sidebar_label: Dragos
55
tags:
66
- Dragos
7-
description: Collect address, asset, vulnerability, and zone details from the Dragos API and send them to Sumo Logic.
7+
description: Collect address, asset, vulnerability, notification, and zone details from the Dragos API and send them to Sumo Logic.
88
---
99
import CodeBlock from '@theme/CodeBlock';
1010
import ExampleJSON from '/files/c2c/dragos/example.json';
@@ -17,13 +17,14 @@ import useBaseUrl from '@docusaurus/useBaseUrl';
1717
Dragos is a cybersecurity platform with an ecosystem tailored for industrial environments, including Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA), Distributed Control System (DCS), and Operational Technology (OT) environments.
1818
Dragos's Operational Technology (OT) offers clear visibility into your Industrial Control System (ICS) assets and communications. It monitors networks, detects threats, and addresses vulnerabilities without causing disruptions or shutdowns, helping you respond confidently to potential threats.
1919

20-
The Dragos source collects address, asset, vulnerability, and zone details from the Dragos API and sends it to Sumo Logic for streamlined analysis.
20+
The Dragos source collects address, asset, vulnerability, notification, and zone details from the Dragos API and sends it to Sumo Logic for streamlined analysis.
2121

2222
## Data collected
2323

2424
| Polling Interval | Data |
2525
| :--- | :--- |
26-
| 5 minutes | Vulnerability |
26+
| 5 minutes | Vulnerabilities |
27+
| 5 minutes | Notifications |
2728
| 24 hours | Addresses |
2829
| 24 hours | Zones |
2930
| 24 hours | Assets |
@@ -89,15 +90,16 @@ Sources can be configured using UTF-8 encoded JSON files with the Collector Ma
8990
| requestEndpoint | String | Yes | `null` | The API URL to fetch the data from the Dragos log source. | `https://sumologic-dragos.cxc.dragos.cloud/` |
9091
| apiID | String | Yes | `null` | API ID of your account for authorization. | `036fxxxx-b642-xxxx-99d3-fcxxxx2exxxx` |
9192
| apiSecret | String | Yes | `null` | API Secret of your account for authorization. | `xxxU1TxxxxxxxxKSJwHYOpK37xxxxxxxxrEHAkU91xxxxxxxxxFrrJ06xxx` |
92-
| pollingIntervalVulnerabilityMin | String | Yes | `5 minutes` | Time interval (in minutes) after which the source will check for new data for API.<br/>**Default**: 5 minutess <br/>**Minimum**: 5 minutes<br/>**Maximum**: 60 minutes | |
93+
| pollingIntervalVulnerabilityMin | String | Yes | `5 minutes` | Time interval (in minutes) after which the source will check for new data for API.<br/>**Default**: 5 minutes <br/>**Minimum**: 5 minutes<br/>**Maximum**: 60 minutes | |
9394
| pollingIntervalAddressesHour | String | Yes | `24 hours` | Time interval (in hours) after which the source will check for new data for API.<br/>**Default**: 24 hours<br/>**Minimum**: 12 hours<br/>**Maximum**: 24 hours | |
9495
| pollingIntervalZonesHour | String | Yes | `24 hours` | Time interval (in hours) after which the source will check for new data for API.<br/>**Default**: 24 hours<br/>**Minimum**: 12 hours<br/>**Maximum**: 24 hours | |
9596
| pollingIntervalAssetsHour | String | Yes | `24 hours` | Time interval (in hours) after which the source will check for new data for API.<br/>**Default**: 24 hours<br/>**Minimum**: 12 hours<br/>**Maximum**: 24 hours | |
96-
| collectAddressDetails | Boolean | No | `True` | Specify if you need to collect the address details. | |
97-
| collectZoneDetails | Boolean | No | `True` | Specify if you need to collect the zone details. | |
98-
| collectDeviceDetails | Boolean | No | `True` | Specify if you need to collect the assets details. | |
99-
| collectVulnerabilityDetails | Boolean | No | `True` | Specify if you need to collect the vulnerability details. | |
100-
97+
| pollingIntervalNotificationMin | String | Yes | `5 minutes` | Time interval (in minutes) after which the source will check for new data for API.<br/>**Default**: 5 minutes <br/>**Minimum**: 5 minutes<br/>**Maximum**: 60 minutes | |
98+
| collectAddressDetails | Boolean | No | `False` | Specify if you need to collect the address details. | |
99+
| collectZoneDetails | Boolean | No | `False` | Specify if you need to collect the zone details. | |
100+
| collectDeviceDetails | Boolean | No | `False` | Specify if you need to collect the assets details. | |
101+
| collectVulnerabilityDetails | Boolean | No | `False` | Specify if you need to collect the vulnerability details. | |
102+
| collectNotificationDetails | Boolean | No | `False` | Specify if you need to collect the notification details. | |
101103
### JSON example
102104

103105
<CodeBlock language="json">{MyComponentSource}</CodeBlock>

docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -252,7 +252,7 @@ In this section, we'll introduce the following concepts:
252252
<div className="box smallbox card">
253253
<div className="container">
254254
<a href="/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/dragos-source"><img src={useBaseUrl('img/send-data/dragos-logo.png')} alt="Thumbnail icon" width="50"/><h4>Dragos</h4></a>
255-
<p>Learn how to collect address, asset, vulnerability, and zone details from the Dragos API and send them to Sumo Logic.</p>
255+
<p>Learn how to collect address, asset, vulnerability, notification, and zone details from the Dragos API and send them to Sumo Logic.</p>
256256
</div>
257257
</div>
258258
<div className="box smallbox card">

static/files/c2c/dragos/example.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,9 +8,10 @@
88
"apiSecret": "xxxU1TxxxxxxxxKSJwHYOpK37xxxxxxxxrEHAkU91xxxxxxxxxFrrJ06xxx",
99
"collectVulnerability": true,
1010
"collectAddress": true,
11+
"collectNotification": false,
1112
"collectZone": false,
1213
"collectAsset": false,
13-
"pollingIntervalVulnerabilityMin": "24h",
14+
"pollingIntervalVulnerabilityMin": "60m",
1415
"pollingIntervalAddressesHour": "5h"
1516
},
1617
"schemaRef": {

static/files/c2c/dragos/example.tf

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,9 +10,10 @@ resource "sumologic_cloud_to_cloud_source" "dragos-source" {
1010
"apiSecret": "xxxU1TxxxxxxxxKSJwHYOpK37xxxxxxxxrEHAkU91xxxxxxxxxFrrJ06xxx",
1111
"collectVulnerability": true,
1212
"collectAddress": true,
13+
"collectNotification": false,
1314
"collectZone": false,
1415
"collectAsset": false,
15-
"pollingIntervalVulnerabilityMin": "24h",
16+
"pollingIntervalVulnerabilityMin": "60m",
1617
"pollingIntervalAddressesHour": "5h"
1718
})
1819
}

0 commit comments

Comments
 (0)