Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Parser Tool change #10369

Closed
wants to merge 8 commits into from
Closed

Parser Tool change #10369

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
b1f9953
parserToolChange
v-amolpatil Apr 23, 2024
a1c83cb
Updating Symantec solution
v-sabiraj Apr 23, 2024
ce27afb
Zoom Reports
v-atulyadav Apr 23, 2024
44bcfe3
Merge branch 'solution-updates-for-parser' of https://github.com/Azur…
v-atulyadav Apr 23, 2024
77c92bf
Repackaging-ExchangeOnline Solution
v-sudkharat Apr 23, 2024
d6b0b69
Merge branch 'solution-updates-for-parser' of https://github.com/Azur…
v-sudkharat Apr 23, 2024
015e673
Maintemplate corrected
v-prasadboke Apr 23, 2024
6e4a102
Merge branch 'solution-updates-for-parser' of https://github.com/Azur…
v-prasadboke Apr 23, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
Binary file added Solutions/GitHub/Package/3.0.6.zip
View file
Open in desktop
Binary file not shown.
265 changes: 133 additions & 132 deletions Solutions/GitHub/Package/mainTemplate.json
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion ...nge Security - Exchange Online/Data/Solution_MicrosoftExchangeSecurityExchangeOnline.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@
],
"WatchlistDescription": "ExchOnlineVIP Watchlists contains a list of VIP users identified in Exchange Online that would be more monitored than others. This watchlist is used in the Audit log workbooks to filter activities on those users.",
"BasePath": "C:\\Github\\Azure-Sentinel\\Solutions\\Microsoft Exchange Security - Exchange Online",
"Version": "3.1.2",
"Version": "3.1.3",
"Metadata": "SolutionMetadata.json",
"TemplateSpec": true,
"Is1Pconnector": false
Expand Down
2 changes: 1 addition & 1 deletion Solutions/Microsoft Exchange Security - Exchange Online/Data/system_generated_metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@
"Metadata": "SolutionMetadata.json",
"TemplateSpec": true,
"Is1Pconnector": false,
"Version": "3.0.5",
"Version": "3.1.3",
"publisherId": "microsoftsentinelcommunity",
"offerId": "azure-sentinel-solution-esionline",
"providers": [
Expand Down
Binary file added Solutions/Microsoft Exchange Security - Exchange Online/Package/3.1.3.zip
View file
Open in desktop
Binary file not shown.
85 changes: 43 additions & 42 deletions Solutions/Microsoft Exchange Security - Exchange Online/Package/mainTemplate.json
View file
Open in desktop

Large diffs are not rendered by default.

Binary file added Solutions/Symantec Endpoint Protection/Package/3.0.2.zip
View file
Open in desktop
Binary file not shown.
2 changes: 1 addition & 1 deletion Solutions/Symantec Endpoint Protection/Package/createUiDefinition.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -57,7 +57,7 @@
"bladeTitle": "Data Connectors",
"elements": [
{
"name": "dataconnectors-text1",
"name": "dataconnectors1-text",
"type": "Microsoft.Common.TextBlock",
"options": {
"text": "This Solution installs the data connector for Symantec Endpoint Protection. You can get Symantec Endpoint Protection Syslog data in your Microsoft Sentinel workspace. After installing the solution, configure and enable this data connector by following guidance in Manage solution view."
Expand Down
33 changes: 17 additions & 16 deletions Solutions/Symantec Endpoint Protection/Package/mainTemplate.json
View file
Open in desktop

Large diffs are not rendered by default.

Binary file added Solutions/ZoomReports/Package/3.0.4.zip
View file
Open in desktop
Binary file not shown.
21 changes: 11 additions & 10 deletions Solutions/ZoomReports/Package/mainTemplate.json
View file
Open in desktop

Large diffs are not rendered by default.

5 changes: 2 additions & 3 deletions Tools/Create-Azure-Sentinel-Solution/common/commonFunctions.ps1
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3516,10 +3516,9 @@ function generateParserContent($file, $contentToImport, $contentResourceDetails)
}

$displayDetails = getParserDetails $global:solutionId $yaml $isyaml
$parserName = $fileName + " Data Parser"
$objParserVariables | Add-Member -NotePropertyName "_parserName$global:parserCounter" -NotePropertyValue "[concat(parameters('workspace'),'/','$($parserName)')]"
$objParserVariables | Add-Member -NotePropertyName "_parserName$global:parserCounter" -NotePropertyValue "[concat(parameters('workspace'),'/','$($displayDetails.displayName)')]"

$objParserVariables | Add-Member -NotePropertyName "_parserId$global:parserCounter" -NotePropertyValue "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), '$($parserName)')]"
$objParserVariables | Add-Member -NotePropertyName "_parserId$global:parserCounter" -NotePropertyValue "[resourceId('Microsoft.OperationalInsights/workspaces/savedSearches', parameters('workspace'), '$($displayDetails.displayName)')]"

$functionAlias = ($null -ne $yaml -and $yaml.Count -gt 0) ? $yaml.FunctionName : "$($displayDetails.functionAlias)"
$parserContentIdValue = "$($functionAlias)-Parser"
Expand Down