-
Notifications
You must be signed in to change notification settings - Fork 228
Added new integration - Sumo Logic Automation Tools #4501
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
jpipkin1
merged 9 commits into
SumoLogic:main
from
rishav-sumo-dev:sumo-logic-automation-tools
Nov 11, 2024
Merged
Changes from 1 commit
Commits
Show all changes
9 commits
Select commit
Hold shift + click to select a range
94f5cc3
added new integration.
62024ed
added the Use case
bcf7650
fix spell
051820e
fix output
0b89562
updated the date
3ed97d0
Merge branch 'main' into sumo-logic-automation-tools
rishav-sumo-dev d508ee3
updated the number integration
e77867f
Merge remote-tracking branch 'origin/sumo-logic-automation-tools' int…
b2c48ac
Updates from review
jpipkin1 File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
54 changes: 54 additions & 0 deletions
54
...ices/automation-service/app-central/integrations/sumo-logic-automation-tools.md
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,54 @@ | ||
| --- | ||
| title: Sumo Logic Automation Tools | ||
| description: '' | ||
| --- | ||
|
|
||
| import useBaseUrl from '@docusaurus/useBaseUrl'; | ||
|
|
||
| <img src={useBaseUrl('/img/platform-services/automation-service/app-central/logos/sumo-logic-notifications.png')} alt="sumo-logic-notifications" width="100"/> | ||
|
|
||
| ***Version: 1.0 | ||
| Updated: Sep 9, 2024*** | ||
|
|
||
| Sumo Logic Automation Tools simplifies CloudSOAR playbooks with data processing and automation. | ||
|
|
||
| ### Actions | ||
|
|
||
| * **Buffer** (*Custom*) - [Description](#buffer) | ||
| * **Data Transform** (*Custom*) - [Description](#data-transform) | ||
| * **Build JSON Object** (*Custom*) - [Description](#build-json-object) | ||
| * **Build Signal Output** (*Custom*) - [Description](#build-signal-output) | ||
|
|
||
| ## Actions Details | ||
|
|
||
| ### Buffer | ||
| - Takes a JSON string or object and returns it as a JSON result. Helpful for dumping a JSON blob in string format and rendering in JSON format. | ||
|
|
||
| ### Data Transform | ||
| - Provides various functions to more easily transform data in a playbook: | ||
| - **String Input** - The value to transform. | ||
| - **Transform Function** - Which string operation to use. Valid options are 'Split', 'Strip', 'Replace' or 'Regex' | ||
| - **Split**: Splits a string into an array based on the delimiter provided in the "Transform Argument" parameter. | ||
| - **Strip / lstrip / rstrip**: Removes leading and trailing characters from a string. Space is the default character to remove, unless specified otherwise in the "Transform Argument" parameter. | ||
| - **Append**: Attaches a string to the end of a string (String Input > Transform Argument) | ||
| - **Prepend**: Attaches a string to the beginning of a string (Transform Argument > String Input) | ||
| - **Replace**: Replace a specified string/word/character with the value specified in the "Transform Argument" and "Replace" parameters. | ||
| - **Regex Replace**: Replace a specified string/word/character with the value specified as a regular expression. This allows for user-provided value to be replace within the 'Transform Argument' and an user-provided value to be replace with in the 'Replace' argument. | ||
| - **Regex**: Match a string with a regex pattern (python regex). Currently, this will return only the first capture group/match in an array. Could be further modified to accept an array num input. | ||
rishav-sumo-dev marked this conversation as resolved.
Outdated
Show resolved
Hide resolved
|
||
| - **Encode UTF8 / Encode ASCII**: Encodes a string in UTF8 or ASCII formats | ||
| - **Lowercase / Uppercase / Title Case / Capitalize**: Converts the case of a string based on the desired case type. | ||
| - **Transform Argument** - Function input (e.g. regex pattern (w/ capture groups), replace argument (a,b) or split delimiter). | ||
| - **Array Element** - Optional: if using 'split' function, select the element to return. Otherwise return the entire array. | ||
rishav-sumo-dev marked this conversation as resolved.
Outdated
Show resolved
Hide resolved
|
||
|
|
||
| ### Build JSON Object | ||
| - Provide the action with JSON key placeholder or string to build a new JSON object with the specified key/values. | ||
|
|
||
| ### Build Signal Output | ||
| - Get Insight V2 action from the the Sumo Logic CSE integration and then takes all signals from the output and converts it into a formatted signal output to be used (example: the output has been used in an email, ticketing system, or a notes section of the CSOAR incident) | ||
| - Exclude fields take precedence over include fields | ||
| - Must add the field signals to the output section of the Get Insight V2 action from the Sumo Logic CSE integration | ||
| - The output format of the signal can be chosen between (HTML or plain text), with the option to include line breaks in the output. | ||
rishav-sumo-dev marked this conversation as resolved.
Outdated
Show resolved
Hide resolved
|
||
|
|
||
| ## Change Log | ||
|
|
||
| * Sep 09, 2024 - First upload | ||
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.