Skip to content

Commit b134949

Browse files
priyansh-sumopriyansh-sumo
authored
Merge branch 'main' into update-sysdig-source
2 parents 5c82e8d + c667d56 commit b134949

File tree

4 files changed

+66
-27
lines changed

4 files changed

+66
-27
lines changed

‎docs/cloud-soar/overview.md‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,7 @@ sidebar_label: Overview
55
---
66

77
import useBaseUrl from '@docusaurus/useBaseUrl';
8+
import StaticIpAddresses from '../reuse/static-ips-automation-service.md';
89

910
Cloud SOAR fully automates triage, investigation, and remediation of threats for any security professional. The open integrations framework allows you to connect to a multitude of third-party applications. The platform provides full incident response lifecycle management with machine learning and threat hunting, accelerating mean time to respond (MTTR).
1011

@@ -437,3 +438,9 @@ If you need to follow HIPAA compliance, it is important to explicitly communicat
437438
You can request retention period times different from those declared in the tables above, as long as the retention period requested is greater than 1 day yet less than 5000 days.
438439

439440
In order to do that, please open a [Support ticket](/docs/get-started/help#support) with your request.
441+
442+
## Static IP addresses
443+
444+
The following table provides the static IP addresses used for Cloud SOAR by deployment. These are provided in case you want to explicitly allow the IP addresses on the integrations you install.
445+
446+
<StaticIpAddresses/>

‎docs/platform-services/automation-service/about-automation-service.md‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,7 @@ description: Get an overview of how the Automation Service allows you to automat
77

88
import useBaseUrl from '@docusaurus/useBaseUrl';
99
import ActionsLimitQuery from '../../reuse/actions-limit-query.md';
10+
import StaticIpAddresses from '../../reuse/static-ips-automation-service.md';
1011

1112
The Automation Service allows you to set up actions that run automatically when certain conditions are met in Sumo Logic. These automated actions help you to respond quickly to a wide arrange of events.
1213

@@ -101,3 +102,9 @@ To prevent abuse of system resources or runaway processes, the Automation Servic
101102
<ActionsLimitQuery/>
102103

103104
Each execution of Custom, Notification, Enrichment, Daemon, Scheduled, and Trigger Actions counts toward the actions limit. User Choice, IF, and Task actions do not count toward the actions limit.
105+
106+
## Static IP addresses
107+
108+
The following table provides the static IP addresses used for the Automation Service by deployment. These are provided in case you want to explicitly allow the IP addresses on the integrations you install.
109+
110+
<StaticIpAddresses/>

‎docs/reuse/static-ips-automation-service.md‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
| Deployment | Static IP addresses |
2+
|:------------|:----------|
3+
| AU | 13.237.251.71 |
4+
| CA | 15.222.181.69 |
5+
| DE | 18.184.129.195 |
6+
| EU | 63.34.175.126 |
7+
| IN | 3.6.125.57 |
8+
| JP | 18.178.171.229 |
9+
| KR | 43.202.239.158 |
10+
| US1 | 3.220.183.150 |
11+
| US2 | 44.241.8.12 |

‎docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/universal-connector-source.md‎

Lines changed: 41 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -417,8 +417,11 @@ The syntax for this function requires a timestamp format as a single argument. S
417417
| Template Example | Output |
418418
| :------------------------------------------------------------------ | :------------------------------------- |
419419
| `{{ .WindowStartUTC "2006-01-02T15:04:05Z" }}` | `2024-03-07T20:15:56Z` |
420+
| `{{ .WindowStartUTC "yyyy-MM-ddTHH:mm:ssZ" }}` | `2024-03-07T20:15:56Z` |
420421
| `{{ .WindowStartUTC "2006-01-02T15:04:05.999999Z07:00" }}` | `2024-03-07T20:15:56.905571Z` |
422+
| `{{ .WindowStartUTC "yyyy-MM-ddTHH:mm:ss.SSSSSSZ" }}` | `2024-03-07T20:15:56.905571Z` |
421423
| `greaterThan:{{ .WindowStartUTC "2006-01-02T15:04:05.999Z07:00" }}` | `greaterThan:2024-03-07T20:15:56.905Z` |
424+
| `greaterThan:{{ .WindowStartUTC "yyyy-MM-ddTHH:mm:ss.SSSZ" }}` | `greaterThan:2024-03-07T20:15:56.905Z` |
422425

423426
### WindowStartLocation
424427

@@ -437,8 +440,11 @@ Refer to the [TZ identifier](https://en.wikipedia.org/wiki/List_of_tz_database_t
437440
| Template Example | Output |
438441
| :--------------------------------------------------------------------------------------- | :------------------------------------------ |
439442
| `{{ .WindowStartLocation "US/Eastern" "2006-01-02T15:04:05Z" }}` | `2024-03-07T15:15:56-05:00` |
443+
| `{{ .WindowStartLocation "US/Eastern" "yyyy-MM-ddTHH:mm:ssZ" }}` | `2024-03-07T15:15:56-05:00` |
440444
| `{{ .WindowStartLocation "US/Pacific" "2006-01-02T15:04:05.999999Z07:00" }}` | `2024-03-07T12:15:56.905-08:00` |
445+
| `{{ .WindowStartLocation "US/Pacific" "yyyy-MM-ddTHH:mm:ss.SSSSSSZ" }}` | `2024-03-07T12:15:56.905-08:00` |
441446
| `greaterThan:{{ .WindowStartLocation "Europe/Berlin" "2006-01-02T15:04:05.999Z07:00" }}` | `greaterThan:2024-03-07T21:15:56.905+01:00` |
447+
| `greaterThan:{{ .WindowStartLocation "Europe/Berlin" "yyyy-MM-ddTHH:mm:ss.SSSZ" }}` | `greaterThan:2024-03-07T21:15:56.905+01:00` |
442448

443449
### WindowEndUTC
444450

@@ -453,10 +459,13 @@ The syntax for this function requires a timestamp format as a single argument. R
453459
| Template Example | Output |
454460
| :------------------------------------------------------------- | :---------------------------------- |
455461
| `{{ .WindowEndUTC "2006-01-02T15:04:05Z" }}` | `2024-03-07T20:15:56Z` |
462+
| `{{ .WindowEndUTC "yyyy-MM-ddTHH:mm:ssZ" }}` | `2024-03-07T20:15:56Z` |
456463
| `{{ .WindowEndUTC "2006-01-02T15:04:05.999999Z07:00" }}` | `2024-03-07T20:15:56.905571Z` |
464+
| `{{ .WindowEndUTC "yyyy-MM-ddTHH:mm:ss.SSSSSSZ" }}` | `2024-03-07T20:15:56.905571Z` |
457465
| `{{ .WindowEndUTC "epoch" }}` | `1709842556` |
458466
| `{{ .WindowEndUTC "epochMilli" }}` | `1709842556000` |
459467
| `lessThan:{{ .WindowEndUTC "2006-01-02T15:04:05.999Z07:00" }}` | `lessThan:2024-03-07T20:15:56.905Z` |
468+
| `lessThan:{{ .WindowEndUTC "yyyy-MM-ddTHH:mm:ss.SSSZ" }}` | `lessThan:2024-03-07T20:15:56.905Z` |
460469

461470
### WindowEndLocation
462471

@@ -475,52 +484,57 @@ Refer to the [TZ identifier](https://en.wikipedia.org/wiki/List_of_tz_database_t
475484
| Template Example | Output |
476485
| :---------------------------------------------------------------------------------- | :--------------------------------------- |
477486
| `{{ .WindowEndLocation "US/Eastern" "2006-01-02T15:04:05Z" }}` | `2024-03-07T15:15:56-05:00` |
487+
| `{{ .WindowEndLocation "US/Eastern" "yyyy-MM-ddTHH:mm:ssZ" }}` | `2024-03-07T15:15:56-05:00` |
478488
| `{{ .WindowEndLocation "US/Pacific" "2006-01-02T15:04:05.999999Z07:00" }}` | `2024-03-07T12:15:56.905-08:00` |
489+
| `{{ .WindowEndLocation "US/Pacific" "yyyy-MM-ddTHH:mm:ss.SSSSSSZ" }}` | `2024-03-07T12:15:56.905-08:00` |
479490
| `lessThan:{{ .WindowEndLocation "Europe/Berlin" "2006-01-02T15:04:05.999Z07:00" }}` | `lessThan:2024-03-07T21:15:56.905+01:00` |
491+
| `lessThan:{{ .WindowEndLocation "Europe/Berlin" "yyyy-MM-ddTHH:mm:ss.SSSZ" }}` | `lessThan:2024-03-07T21:15:56.905+01:00` |
480492

481493
## Timestamp Formatting
482494

483-
The source uses the the [Go programming language timestamp formatting](https://go.dev/src/time/format.go). See the table below for references and examples.
495+
The source uses the [Go programming language timestamp formatting](https://go.dev/src/time/format.go) and the Human-readable timestamp formatting. See the table below for references and examples.
484496

485497
:::sumo[Best Practice]
486498
We recommend using [this code snippet](https://goplay.tools/snippet/WTFe5ZLU9PO) as a quick way to locally test timestamp parsing with a format before configuring the source.
487499
:::
488500

489501
### Format Reference
490502

491-
| Date Format | Reference Value |
492-
| :------------------------------------------ | :-------------------------------------------------------------------- |
493-
| Year | `2006` |
494-
| Month Full Name | `January` |
495-
| Month Abbreviated Name | `Jan` |
496-
| Month Zero Leading Number | `01` |
497-
| Month Number | `1` |
498-
| Day Zero Leading Number | `02` |
499-
| Day Number | `2` |
500-
| Day Weekday Full Name | `Monday` |
501-
| Day Weekday Abbreviated Name | `Mon` |
502-
| 24 Hour Zero Leading Number | `15` |
503-
| 12 Hour Zero Leading Number | `03` |
504-
| 12 Hour Number | `3` |
505-
| Minute Zero Leading Number | `04` |
506-
| Minute Number | `4` |
507-
| Second Zero Leading Number | `05` |
508-
| Second Number | `5` |
509-
| Fractional Seconds | `.999` Milliseconds, `.999999` Microseconds, `.999999999` Nanoseconds |
510-
| AM/PM Uppercase | `PM` |
511-
| AM/PM Lowercase | `pm` |
512-
| Timezone Offset without Colon Use Z for UTC | `Z0700` |
513-
| Timezone Offset with Colon Use Z for UTC | `Z07:00` |
514-
| Timezone Offset without Colon | `-0700` |
515-
| Timezone Offset with Colon | `-07:00` |
516-
| Timezone Abbreviated Name | `MST` |
503+
| Date Format | Reference Value | Human Readable Referencce Value |
504+
| :------------------------------------------ | :-------------------------------------------------------------------- | :--------------------------------------------------------------------- |
505+
| Year | `2006` | `yyyy` |
506+
| Month Full Name | `January` | `-` |
507+
| Month Abbreviated Name | `Jan` | `MMM` |
508+
| Month Zero Leading Number | `01` | `MM` |
509+
| Month Number | `1` | `-` |
510+
| Day Zero Leading Number | `02` | `dd` |
511+
| Day Number | `2` | `-` |
512+
| Day Weekday Full Name | `Monday` | `-` |
513+
| Day Weekday Abbreviated Name | `Mon` | `-` |
514+
| 24 Hour Zero Leading Number | `15` | `HH` |
515+
| 12 Hour Zero Leading Number | `03` | `-` |
516+
| 12 Hour Number | `3` | `-` |
517+
| Minute Zero Leading Number | `04` | `mm` |
518+
| Minute Number | `4` | `-` |
519+
| Second Zero Leading Number | `05` | `ss` |
520+
| Second Number | `5` | `-` |
521+
| Fractional Seconds | `.999` Milliseconds, `.999999` Microseconds, `.999999999` Nanoseconds | `.SSS` Milliseconds, `.SSSSSS` Microseconds, `.SSSSSSSSS` Nanoseconds` |
522+
| AM/PM Uppercase | `PM` | `a` |
523+
| AM/PM Lowercase | `pm` | `aa` |
524+
| Timezone Offset without Colon Use Z for UTC | `Z0700` | `Z` |
525+
| Timezone Offset with Colon Use Z for UTC | `Z07:00` | `Z` |
526+
| Timezone Offset without Colon | `-0700` | `-HHmm` |
527+
| Timezone Offset with Colon | `-07:00` | `-HH:mm` |
528+
| Timezone Abbreviated Name | `MST` | `zzz` |
517529

518530
### Format Examples
519531

520532
| Standard | Timestamp in Log | Timestamp Format |
521533
| :-------------------- | :------------------------------- | :------------------------------------ |
522534
| RFC 3339 | `2024-02-01T16:07:57Z` | `2006-01-02T15:04:05Z07:00` |
535+
| RFC 3339 | `2024-02-01T16:07:57Z` | `yyyy-MM-ddTHH:mm:ssZ` |
523536
| RFC 3339 Nano Seconds | `2024-02-01T16:07:57.541468757Z` | `2006-01-02T15:04:05.999999999Z07:00` |
537+
| RFC 3339 Nano Seconds | `2024-02-01T16:07:57.541468757Z` | `yyyy-MM-ddTHH:mm:ss.SSSSSSSSSZ` |
524538
| Epoch | `1706803677` | `epoch` |
525539
| Epoch in Milliseconds | `1706803677000` | `epochMilli` |
526540

0 commit comments

Comments
 (0)