You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We're excited to announce the release of our new cloud-to-cloud source for Dragos. This source helps you to collect address, asset, vulnerability, and zone details from the Dragos API and ingest them into Sumo Logic for streamlined analysis. [Learn more](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/dragos-source).
Dragos is a cybersecurity platform with an ecosystem tailored for industrial environments, including Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA), Distributed Control System (DCS), and Operational Technology (OT) environments.
18
18
Dragos's Operational Technology (OT) offers clear visibility into your Industrial Control System (ICS) assets and communications. It monitors networks, detects threats, and addresses vulnerabilities without causing disruptions or shutdowns, helping you respond confidently to potential threats.
@@ -23,10 +23,10 @@ The Dragos source collects address, asset, vulnerability, and zone details from
23
23
24
24
| Polling Interval | Data |
25
25
| :--- | :--- |
26
-
| 5 min| Vulnerability |
27
-
| 24 hrs| Addresses |
28
-
| 24 hrs| Zones |
29
-
| 24 hrs| Assets |
26
+
| 5 minutes| Vulnerability |
27
+
| 24 hours| Addresses |
28
+
| 24 hours| Zones |
29
+
| 24 hours| Assets |
30
30
31
31
## Setup
32
32
@@ -93,22 +93,10 @@ Sources can be configured using UTF-8 encoded JSON files with the Collector Ma
93
93
| requestEndpoint | String | Yes |`null`| The API URL to fetch the data from the Dragos log source. |`https://sumologic-dragos.cxc.dragos.cloud/`|
94
94
| apiID | String | Yes |`null`| API ID of your account for authorization. |`036fxxxx-b642-xxxx-99d3-fcxxxx2exxxx`|
95
95
| apiSecret | String | Yes |`null`| API Secret of your account for authorization. |`xxxU1TxxxxxxxxKSJwHYOpK37xxxxxxxxrEHAkU91xxxxxxxxxFrrJ06xxx`|
96
-
| pollingIntervalVulnerabilityMin | String | Yes | `5 mins` | Time interval (in minutes) after which the source will check for new data for API.
97
-
Default: 5 min
98
-
Min: 5 min
99
-
Max: 60 min | |
100
-
| pollingIntervalAddressesHour | String | Yes | `24 hrs` | Time interval (in hours) after which the source will check for new data for API.
101
-
Default: 24 hrs
102
-
Min: 12 hrs
103
-
Max: 24 hrs | |
104
-
| pollingIntervalZonesHour | String | Yes | `24 hrs` | Time interval (in hours) after which the source will check for new data for API.
105
-
Default: 24 hrs
106
-
Min: 12 hrs
107
-
Max: 24 hrs | |
108
-
| pollingIntervalAssetsHour | String | Yes | `24 hrs` | Time interval (in hours) after which the source will check for new data for API.
109
-
Default: 24 hrs
110
-
Min: 12 hrs
111
-
Max: 24 hrs | |
96
+
| pollingIntervalVulnerabilityMin | String | Yes |`5 minutes`| Time interval (in minutes) after which the source will check for new data for API.<br/>**Default**: 5 minutess <br/>**Minimum**: 5 minutes<br/>**Maximum**: 60 minutes ||
97
+
| pollingIntervalAddressesHour | String | Yes |`24 hours`| Time interval (in hours) after which the source will check for new data for API.<br/>**Default**: 24 hours<br/>**Minimum**: 12 hours<br/>**Maximum**: 24 hours ||
98
+
| pollingIntervalZonesHour | String | Yes |`24 hours`| Time interval (in hours) after which the source will check for new data for API.<br/>**Default**: 24 hours<br/>**Minimum**: 12 hours<br/>**Maximum**: 24 hours ||
99
+
| pollingIntervalAssetsHour | String | Yes |`24 hours`| Time interval (in hours) after which the source will check for new data for API.<br/>**Default**: 24 hours<br/>**Minimum**: 12 hours<br/>**Maximum**: 24 hours ||
112
100
| collectAddressDetails | Boolean | No |`True`| Specify if you need to collect the address details. ||
113
101
| collectZoneDetails | Boolean | No |`True`| Specify if you need to collect the zone details. ||
114
102
| collectDeviceDetails | Boolean | No |`True`| Specify if you need to collect the assets details. ||
0 commit comments