{ "name": "axonius", "title": "Axonius", "version": "0.1.0", "release": "beta", "description": "Collect logs from Axonius with Elastic Agent.", "type": "integration", "download": "/epr/axonius/axonius-0.1.0.zip", "path": "/package/axonius/0.1.0", "icons": [ { "src": "/img/axonius-logo.svg", "path": "/package/axonius/0.1.0/img/axonius-logo.svg", "title": "Axonius Logo", "size": "32x32", "type": "image/svg+xml" } ], "conditions": { "kibana": { "version": "^8.19.10 || ~9.1.10 || ~9.2.4 || ^9.3.1" }, "elastic": { "subscription": "basic" } }, "owner": { "type": "elastic", "github": "elastic/security-service-integrations" }, "categories": [ "asset_inventory", "datastore", "iam", "network", "security", "siem", "ticketing", "vulnerability_management" ], "signature_path": "/epr/axonius/axonius-0.1.0.zip.sig", "format_version": "3.3.2", "readme": "/package/axonius/0.1.0/docs/README.md", "license": "basic", "screenshots": [ { "src": "/img/axonius-adapter-dashboard.png", "path": "/package/axonius/0.1.0/img/axonius-adapter-dashboard.png", "title": "Adapter Dashboard", "size": "600x600", "type": "image/png" }, { "src": "/img/axonius-user-dashboard.png", "path": "/package/axonius/0.1.0/img/axonius-user-dashboard.png", "title": "User Dashboard", "size": "600x600", "type": "image/png" }, { "src": "/img/axonius-gateway.png", "path": "/package/axonius/0.1.0/img/axonius-gateway.png", "title": "Gateway Dashboard", "size": "600x600", "type": "image/png" }, { "src": "/img/axonius-exposure-dashboard.png", "path": "/package/axonius/0.1.0/img/axonius-exposure-dashboard.png", "title": "Exposure Assets Dashboard", "size": "600x600", "type": "image/png" }, { "src": "/img/axonius-alert-finding-dashboard.png", "path": "/package/axonius/0.1.0/img/axonius-alert-finding-dashboard.png", "title": "Alert Findings Assets Dashboard", "size": "600x600", "type": "image/png" }, { "src": "/img/axonius-incident-dashboard.png", "path": "/package/axonius/0.1.0/img/axonius-incident-dashboard.png", "title": "Incident Assets Dashboard", "size": "600x600", "type": "image/png" }, { "src": "/img/axonius-ticket-dashboard.png", "path": "/package/axonius/0.1.0/img/axonius-ticket-dashboard.png", "title": "Tickets Dashboard", "size": "600x600", "type": "image/png" }, { "src": "/img/axonius-network-dashboard.png", "path": "/package/axonius/0.1.0/img/axonius-network-dashboard.png", "title": "Network Assets Dashboard", "size": "600x600", "type": "image/png" }, { "src": "/img/axonius-identity-dashboard.png", "path": "/package/axonius/0.1.0/img/axonius-identity-dashboard.png", "title": "Identity Assets Dashboard", "size": "600x600", "type": "image/png" }, { "src": "/img/axonius-compute-dasboard.png", "path": "/package/axonius/0.1.0/img/axonius-compute-dasboard.png", "title": "Compute Assets Dashboard", "size": "600x600", "type": "image/png" }, { "src": "/img/axonius-application-dashboard.png", "path": "/package/axonius/0.1.0/img/axonius-application-dashboard.png", "title": "Application Assets Dashboard", "size": "600x600", "type": "image/png" } ], "assets": [ "/package/axonius/0.1.0/LICENSE.txt", "/package/axonius/0.1.0/changelog.yml", "/package/axonius/0.1.0/manifest.yml", "/package/axonius/0.1.0/validation.yml", "/package/axonius/0.1.0/docs/README.md", "/package/axonius/0.1.0/img/axonius-adapter-dashboard.png", "/package/axonius/0.1.0/img/axonius-alert-finding-dashboard.png", "/package/axonius/0.1.0/img/axonius-application-dashboard.png", "/package/axonius/0.1.0/img/axonius-compute-dasboard.png", "/package/axonius/0.1.0/img/axonius-exposure-dashboard.png", "/package/axonius/0.1.0/img/axonius-gateway.png", "/package/axonius/0.1.0/img/axonius-identity-dashboard.png", "/package/axonius/0.1.0/img/axonius-incident-dashboard.png", "/package/axonius/0.1.0/img/axonius-logo.svg", "/package/axonius/0.1.0/img/axonius-network-dashboard.png", "/package/axonius/0.1.0/img/axonius-ticket-dashboard.png", "/package/axonius/0.1.0/img/axonius-user-dashboard.png", "/package/axonius/0.1.0/data_stream/adapter/lifecycle.yml", "/package/axonius/0.1.0/data_stream/adapter/manifest.yml", "/package/axonius/0.1.0/data_stream/adapter/sample_event.json", "/package/axonius/0.1.0/data_stream/alert_finding/lifecycle.yml", "/package/axonius/0.1.0/data_stream/alert_finding/manifest.yml", "/package/axonius/0.1.0/data_stream/alert_finding/sample_event.json", "/package/axonius/0.1.0/data_stream/application/lifecycle.yml", "/package/axonius/0.1.0/data_stream/application/manifest.yml", "/package/axonius/0.1.0/data_stream/application/sample_event.json", "/package/axonius/0.1.0/data_stream/compute/lifecycle.yml", "/package/axonius/0.1.0/data_stream/compute/manifest.yml", "/package/axonius/0.1.0/data_stream/compute/sample_event.json", "/package/axonius/0.1.0/data_stream/exposure/lifecycle.yml", "/package/axonius/0.1.0/data_stream/exposure/manifest.yml", "/package/axonius/0.1.0/data_stream/exposure/sample_event.json", "/package/axonius/0.1.0/data_stream/gateway/lifecycle.yml", "/package/axonius/0.1.0/data_stream/gateway/manifest.yml", "/package/axonius/0.1.0/data_stream/gateway/sample_event.json", "/package/axonius/0.1.0/data_stream/identity/lifecycle.yml", "/package/axonius/0.1.0/data_stream/identity/manifest.yml", "/package/axonius/0.1.0/data_stream/identity/sample_event.json", "/package/axonius/0.1.0/data_stream/incident/lifecycle.yml", "/package/axonius/0.1.0/data_stream/incident/manifest.yml", "/package/axonius/0.1.0/data_stream/incident/sample_event.json", "/package/axonius/0.1.0/data_stream/network/lifecycle.yml", "/package/axonius/0.1.0/data_stream/network/manifest.yml", "/package/axonius/0.1.0/data_stream/network/sample_event.json", "/package/axonius/0.1.0/data_stream/storage/lifecycle.yml", "/package/axonius/0.1.0/data_stream/storage/manifest.yml", "/package/axonius/0.1.0/data_stream/storage/sample_event.json", "/package/axonius/0.1.0/data_stream/ticket/lifecycle.yml", "/package/axonius/0.1.0/data_stream/ticket/manifest.yml", "/package/axonius/0.1.0/data_stream/ticket/sample_event.json", "/package/axonius/0.1.0/data_stream/user/lifecycle.yml", "/package/axonius/0.1.0/data_stream/user/manifest.yml", "/package/axonius/0.1.0/data_stream/user/sample_event.json", "/package/axonius/0.1.0/kibana/dashboard/axonius-08681c8c-7071-48b8-9fb2-e2c31c38539f.json", "/package/axonius/0.1.0/kibana/dashboard/axonius-1b395a2d-b8dd-464b-aee9-ceb999d41063.json", "/package/axonius/0.1.0/kibana/dashboard/axonius-284475dd-0313-43dd-8a82-3eee86ed97ef.json", "/package/axonius/0.1.0/kibana/dashboard/axonius-428b4f4d-be94-4840-8dc2-8f03a38f97db.json", "/package/axonius/0.1.0/kibana/dashboard/axonius-45c76e49-59d4-4f27-85f5-7f32edf6e0e5.json", "/package/axonius/0.1.0/kibana/dashboard/axonius-50841034-1314-4e26-8be3-47d38241c359.json", "/package/axonius/0.1.0/kibana/dashboard/axonius-60472232-ca7b-45e6-9fa6-72e6efc41a8e.json", "/package/axonius/0.1.0/kibana/dashboard/axonius-99a89250-dd1e-4d20-be86-c7079b5c7661.json", "/package/axonius/0.1.0/kibana/dashboard/axonius-a47bc47d-5f69-473f-92a1-07a79cc71cf8.json", "/package/axonius/0.1.0/kibana/dashboard/axonius-bef9d23e-721a-485d-a9cc-a22818cf23c0.json", "/package/axonius/0.1.0/kibana/dashboard/axonius-cc6c1878-aa15-4765-a4d9-76eca1cc4078.json", "/package/axonius/0.1.0/kibana/search/axonius-18fe2e86-4290-48e4-ab15-86ae9cdc2473.json", "/package/axonius/0.1.0/kibana/search/axonius-262be09c-91c0-4bb4-9eb1-149378464519.json", "/package/axonius/0.1.0/kibana/search/axonius-355d0bbf-7a56-41b1-aa19-d23b85e07d99.json", "/package/axonius/0.1.0/kibana/search/axonius-3be4bf2c-5043-45ae-958b-9d5355f34533.json", "/package/axonius/0.1.0/kibana/search/axonius-608023db-f45b-4afc-8c58-1eedc86bdc76.json", "/package/axonius/0.1.0/kibana/search/axonius-63085108-53e8-4c7f-8da4-daa1879645eb.json", "/package/axonius/0.1.0/kibana/search/axonius-723a9fbe-5e79-4c85-b6c8-486aa02fd95c.json", "/package/axonius/0.1.0/kibana/search/axonius-825fa4a9-b9e9-4e18-80b2-e61a9b1cd49c.json", "/package/axonius/0.1.0/kibana/search/axonius-8e8c1030-9a6a-4009-b752-12bf62c346fd.json", "/package/axonius/0.1.0/kibana/search/axonius-90ec046b-f632-4975-81cc-061646fd5b18.json", "/package/axonius/0.1.0/kibana/search/axonius-99de67e1-3d38-4d0f-9ec1-4e03e811a2b3.json", "/package/axonius/0.1.0/kibana/search/axonius-bfd7962c-9bdf-488e-9302-67164b99a8fd.json", "/package/axonius/0.1.0/kibana/search/axonius-c047813e-9a26-40e8-b036-d40b5a98394a.json", "/package/axonius/0.1.0/data_stream/adapter/fields/base-fields.yml", "/package/axonius/0.1.0/data_stream/adapter/fields/beats.yml", "/package/axonius/0.1.0/data_stream/adapter/fields/ecs.yml", "/package/axonius/0.1.0/data_stream/adapter/fields/fields.yml", "/package/axonius/0.1.0/data_stream/adapter/fields/is-transform-source-true.yml", "/package/axonius/0.1.0/data_stream/alert_finding/fields/base-fields.yml", "/package/axonius/0.1.0/data_stream/alert_finding/fields/beats.yml", "/package/axonius/0.1.0/data_stream/alert_finding/fields/ecs.yml", "/package/axonius/0.1.0/data_stream/alert_finding/fields/fields.yml", "/package/axonius/0.1.0/data_stream/alert_finding/fields/is-transform-source-true.yml", "/package/axonius/0.1.0/data_stream/application/fields/base-fields.yml", "/package/axonius/0.1.0/data_stream/application/fields/beats.yml", "/package/axonius/0.1.0/data_stream/application/fields/ecs.yml", "/package/axonius/0.1.0/data_stream/application/fields/fields.yml", "/package/axonius/0.1.0/data_stream/application/fields/is-transform-source-true.yml", "/package/axonius/0.1.0/data_stream/compute/fields/base-fields.yml", "/package/axonius/0.1.0/data_stream/compute/fields/beats.yml", "/package/axonius/0.1.0/data_stream/compute/fields/ecs.yml", "/package/axonius/0.1.0/data_stream/compute/fields/fields.yml", "/package/axonius/0.1.0/data_stream/compute/fields/is-transform-source-true.yml", "/package/axonius/0.1.0/data_stream/exposure/fields/base-fields.yml", "/package/axonius/0.1.0/data_stream/exposure/fields/beats.yml", "/package/axonius/0.1.0/data_stream/exposure/fields/ecs.yml", "/package/axonius/0.1.0/data_stream/exposure/fields/fields.yml", "/package/axonius/0.1.0/data_stream/exposure/fields/is-transform-source-true.yml", "/package/axonius/0.1.0/data_stream/gateway/fields/base-fields.yml", "/package/axonius/0.1.0/data_stream/gateway/fields/beats.yml", "/package/axonius/0.1.0/data_stream/gateway/fields/ecs.yml", "/package/axonius/0.1.0/data_stream/gateway/fields/fields.yml", "/package/axonius/0.1.0/data_stream/gateway/fields/is-transform-source-true.yml", "/package/axonius/0.1.0/data_stream/identity/fields/base-fields.yml", "/package/axonius/0.1.0/data_stream/identity/fields/beats.yml", "/package/axonius/0.1.0/data_stream/identity/fields/ecs.yml", "/package/axonius/0.1.0/data_stream/identity/fields/fields.yml", "/package/axonius/0.1.0/data_stream/identity/fields/is-transform-source-true.yml", "/package/axonius/0.1.0/data_stream/incident/fields/base-fields.yml", "/package/axonius/0.1.0/data_stream/incident/fields/beats.yml", "/package/axonius/0.1.0/data_stream/incident/fields/ecs.yml", "/package/axonius/0.1.0/data_stream/incident/fields/fields.yml", "/package/axonius/0.1.0/data_stream/incident/fields/is-transform-source-true.yml", "/package/axonius/0.1.0/data_stream/network/fields/base-fields.yml", "/package/axonius/0.1.0/data_stream/network/fields/beats.yml", "/package/axonius/0.1.0/data_stream/network/fields/ecs.yml", "/package/axonius/0.1.0/data_stream/network/fields/fields.yml", "/package/axonius/0.1.0/data_stream/network/fields/is-transform-source-true.yml", "/package/axonius/0.1.0/data_stream/storage/fields/base-fields.yml", "/package/axonius/0.1.0/data_stream/storage/fields/beats.yml", "/package/axonius/0.1.0/data_stream/storage/fields/ecs.yml", "/package/axonius/0.1.0/data_stream/storage/fields/fields.yml", "/package/axonius/0.1.0/data_stream/storage/fields/is-transform-source-true.yml", "/package/axonius/0.1.0/data_stream/ticket/fields/base-fields.yml", "/package/axonius/0.1.0/data_stream/ticket/fields/beats.yml", "/package/axonius/0.1.0/data_stream/ticket/fields/ecs.yml", "/package/axonius/0.1.0/data_stream/ticket/fields/fields.yml", "/package/axonius/0.1.0/data_stream/ticket/fields/is-transform-source-true.yml", "/package/axonius/0.1.0/data_stream/user/fields/base-fields.yml", "/package/axonius/0.1.0/data_stream/user/fields/beats.yml", "/package/axonius/0.1.0/data_stream/user/fields/ecs.yml", "/package/axonius/0.1.0/data_stream/user/fields/fields.yml", "/package/axonius/0.1.0/data_stream/user/fields/is-transform-source-true.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_adapter/manifest.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_adapter/transform.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_alert_finding/manifest.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_alert_finding/transform.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_application/manifest.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_application/transform.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_compute/manifest.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_compute/transform.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_exposure/manifest.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_exposure/transform.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_gateway/manifest.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_gateway/transform.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_identity/manifest.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_identity/transform.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_incident/manifest.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_incident/transform.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_network/manifest.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_network/transform.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_storage/manifest.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_storage/transform.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_ticket/manifest.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_ticket/transform.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_user/manifest.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_user/transform.yml", "/package/axonius/0.1.0/data_stream/adapter/agent/stream/cel.yml.hbs", "/package/axonius/0.1.0/data_stream/adapter/elasticsearch/ilm/default_policy.json", "/package/axonius/0.1.0/data_stream/adapter/elasticsearch/ingest_pipeline/default.yml", "/package/axonius/0.1.0/data_stream/alert_finding/agent/stream/cel.yml.hbs", "/package/axonius/0.1.0/data_stream/alert_finding/elasticsearch/ilm/default_policy.json", "/package/axonius/0.1.0/data_stream/alert_finding/elasticsearch/ingest_pipeline/default.yml", "/package/axonius/0.1.0/data_stream/application/agent/stream/cel.yml.hbs", "/package/axonius/0.1.0/data_stream/application/elasticsearch/ilm/default_policy.json", "/package/axonius/0.1.0/data_stream/application/elasticsearch/ingest_pipeline/default.yml", "/package/axonius/0.1.0/data_stream/application/elasticsearch/ingest_pipeline/pipeline_application_settings.yml", "/package/axonius/0.1.0/data_stream/application/elasticsearch/ingest_pipeline/pipeline_audit_activities.yml", "/package/axonius/0.1.0/data_stream/application/elasticsearch/ingest_pipeline/pipeline_business_applications.yml", "/package/axonius/0.1.0/data_stream/application/elasticsearch/ingest_pipeline/pipeline_expenses.yml", "/package/axonius/0.1.0/data_stream/application/elasticsearch/ingest_pipeline/pipeline_licenses.yml", "/package/axonius/0.1.0/data_stream/application/elasticsearch/ingest_pipeline/pipeline_saas_applications.yml", "/package/axonius/0.1.0/data_stream/application/elasticsearch/ingest_pipeline/pipeline_software.yml", "/package/axonius/0.1.0/data_stream/compute/agent/stream/cel.yml.hbs", "/package/axonius/0.1.0/data_stream/compute/elasticsearch/ilm/default_policy.json", "/package/axonius/0.1.0/data_stream/compute/elasticsearch/ingest_pipeline/default.yml", "/package/axonius/0.1.0/data_stream/compute/elasticsearch/ingest_pipeline/pipeline-compute-image.yml", "/package/axonius/0.1.0/data_stream/compute/elasticsearch/ingest_pipeline/pipeline-device.yml", "/package/axonius/0.1.0/data_stream/exposure/agent/stream/cel.yml.hbs", "/package/axonius/0.1.0/data_stream/exposure/elasticsearch/ilm/default_policy.json", "/package/axonius/0.1.0/data_stream/exposure/elasticsearch/ingest_pipeline/default.yml", "/package/axonius/0.1.0/data_stream/exposure/elasticsearch/ingest_pipeline/pipeline-vulnerability-instance.yml", "/package/axonius/0.1.0/data_stream/gateway/agent/stream/cel.yml.hbs", "/package/axonius/0.1.0/data_stream/gateway/elasticsearch/ilm/default_policy.json", "/package/axonius/0.1.0/data_stream/gateway/elasticsearch/ingest_pipeline/default.yml", "/package/axonius/0.1.0/data_stream/identity/agent/stream/cel.yml.hbs", "/package/axonius/0.1.0/data_stream/identity/elasticsearch/ilm/default_policy.json", "/package/axonius/0.1.0/data_stream/identity/elasticsearch/ingest_pipeline/default.yml", "/package/axonius/0.1.0/data_stream/identity/elasticsearch/ingest_pipeline/pipeline-account.yml", "/package/axonius/0.1.0/data_stream/identity/elasticsearch/ingest_pipeline/pipeline-certificate.yml", "/package/axonius/0.1.0/data_stream/identity/elasticsearch/ingest_pipeline/pipeline-group.yml", "/package/axonius/0.1.0/data_stream/identity/elasticsearch/ingest_pipeline/pipeline-user.yml", "/package/axonius/0.1.0/data_stream/incident/agent/stream/cel.yml.hbs", "/package/axonius/0.1.0/data_stream/incident/elasticsearch/ilm/default_policy.json", "/package/axonius/0.1.0/data_stream/incident/elasticsearch/ingest_pipeline/default.yml", "/package/axonius/0.1.0/data_stream/network/agent/stream/cel.yml.hbs", "/package/axonius/0.1.0/data_stream/network/elasticsearch/ilm/default_policy.json", "/package/axonius/0.1.0/data_stream/network/elasticsearch/ingest_pipeline/default.yml", "/package/axonius/0.1.0/data_stream/network/elasticsearch/ingest_pipeline/pipeline-firewall.yml", "/package/axonius/0.1.0/data_stream/network/elasticsearch/ingest_pipeline/pipeline-load-balancer.yml", "/package/axonius/0.1.0/data_stream/network/elasticsearch/ingest_pipeline/pipeline-nat-rule.yml", "/package/axonius/0.1.0/data_stream/network/elasticsearch/ingest_pipeline/pipeline-network-device.yml", "/package/axonius/0.1.0/data_stream/network/elasticsearch/ingest_pipeline/pipeline-network-route.yml", "/package/axonius/0.1.0/data_stream/network/elasticsearch/ingest_pipeline/pipeline-network.yml", "/package/axonius/0.1.0/data_stream/storage/agent/stream/cel.yml.hbs", "/package/axonius/0.1.0/data_stream/storage/elasticsearch/ilm/default_policy.json", "/package/axonius/0.1.0/data_stream/storage/elasticsearch/ingest_pipeline/default.yml", "/package/axonius/0.1.0/data_stream/ticket/agent/stream/cel.yml.hbs", "/package/axonius/0.1.0/data_stream/ticket/elasticsearch/ilm/default_policy.json", "/package/axonius/0.1.0/data_stream/ticket/elasticsearch/ingest_pipeline/default.yml", "/package/axonius/0.1.0/data_stream/user/agent/stream/cel.yml.hbs", "/package/axonius/0.1.0/data_stream/user/elasticsearch/ilm/default_policy.json", "/package/axonius/0.1.0/data_stream/user/elasticsearch/ingest_pipeline/default.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_adapter/fields/base-fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_adapter/fields/beats.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_adapter/fields/ecs.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_adapter/fields/fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_adapter/fields/is-transform-source-false.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_alert_finding/fields/base-fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_alert_finding/fields/beats.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_alert_finding/fields/ecs.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_alert_finding/fields/fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_alert_finding/fields/is-transform-source-false.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_application/fields/base-fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_application/fields/beats.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_application/fields/ecs.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_application/fields/fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_application/fields/is-transform-source-false.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_compute/fields/base-fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_compute/fields/beats.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_compute/fields/ecs.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_compute/fields/fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_compute/fields/is-transform-source-false.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_exposure/fields/base-fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_exposure/fields/beats.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_exposure/fields/ecs.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_exposure/fields/fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_exposure/fields/is-transform-source-false.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_gateway/fields/base-fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_gateway/fields/beats.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_gateway/fields/ecs.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_gateway/fields/fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_gateway/fields/is-transform-source-false.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_identity/fields/base-fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_identity/fields/beats.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_identity/fields/ecs.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_identity/fields/fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_identity/fields/is-transform-source-false.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_incident/fields/base-fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_incident/fields/beats.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_incident/fields/ecs.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_incident/fields/fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_incident/fields/is-transform-source-false.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_network/fields/base-fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_network/fields/beats.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_network/fields/ecs.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_network/fields/fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_network/fields/is-transform-source-false.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_storage/fields/base-fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_storage/fields/beats.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_storage/fields/ecs.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_storage/fields/fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_storage/fields/is-transform-source-false.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_ticket/fields/base-fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_ticket/fields/beats.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_ticket/fields/ecs.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_ticket/fields/fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_ticket/fields/is-transform-source-false.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_user/fields/base-fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_user/fields/beats.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_user/fields/ecs.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_user/fields/fields.yml", "/package/axonius/0.1.0/elasticsearch/transform/latest_user/fields/is-transform-source-false.yml" ], "policy_templates": [ { "name": "axonius", "title": "Axonius", "description": "Collect logs from Axonius.", "inputs": [ { "type": "cel", "vars": [ { "name": "url", "type": "url", "title": "URL", "description": "Base URL of the Axonius server.", "multi": false, "required": true, "show_user": true }, { "name": "api_key", "type": "password", "title": "API Key", "description": "API key from the Axonius server.", "multi": false, "required": true, "show_user": true }, { "name": "secret_key", "type": "password", "title": "API Secret", "description": "API secret from the Axonius server.", "multi": false, "required": true, "show_user": true }, { "name": "proxy_url", "type": "text", "title": "Proxy URL", "description": "URL to proxy connections in the form of http[s]://:@:. Please ensure your username and password are in URL encoded format.", "multi": false, "required": false, "show_user": false }, { "name": "ssl", "type": "yaml", "title": "SSL Configuration", "description": "SSL configuration options. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-ssl.html#ssl-common-config) for details.", "multi": false, "required": false, "show_user": false, "default": "#certificate_authorities:\n# - |\n# -----BEGIN CERTIFICATE-----\n# MIIDCjCCAfKgAwIBAgITJ706Mu2wJlKckpIvkWxEHvEyijANBgkqhkiG9w0BAQsF\n# ADAUMRIwEAYDVQQDDAlsb2NhbGhvc3QwIBcNMTkwNzIyMTkyOTA0WhgPMjExOTA2\n# MjgxOTI5MDRaMBQxEjAQBgNVBAMMCWxvY2FsaG9zdDCCASIwDQYJKoZIhvcNAQEB\n# BQADggEPADCCAQoCggEBANce58Y/JykI58iyOXpxGfw0/gMvF0hUQAcUrSMxEO6n\n# fZRA49b4OV4SwWmA3395uL2eB2NB8y8qdQ9muXUdPBWE4l9rMZ6gmfu90N5B5uEl\n# 94NcfBfYOKi1fJQ9i7WKhTjlRkMCgBkWPkUokvBZFRt8RtF7zI77BSEorHGQCk9t\n# /D7BS0GJyfVEhftbWcFEAG3VRcoMhF7kUzYwp+qESoriFRYLeDWv68ZOvG7eoWnP\n# PsvZStEVEimjvK5NSESEQa9xWyJOmlOKXhkdymtcUd/nXnx6UTCFgnkgzSdTWV41\n# CI6B6aJ9svCTI2QuoIq2HxX/ix7OvW1huVmcyHVxyUECAwEAAaNTMFEwHQYDVR0O\n# BBYEFPwN1OceFGm9v6ux8G+DZ3TUDYxqMB8GA1UdIwQYMBaAFPwN1OceFGm9v6ux\n# 8G+DZ3TUDYxqMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAG5D\n# 874A4YI7YUwOVsVAdbWtgp1d0zKcPRR+r2OdSbTAV5/gcS3jgBJ3i1BN34JuDVFw\n# 3DeJSYT3nxy2Y56lLnxDeF8CUTUtVQx3CuGkRg1ouGAHpO/6OqOhwLLorEmxi7tA\n# H2O8mtT0poX5AnOAhzVy7QW0D/k4WaoLyckM5hUa6RtvgvLxOwA0U+VGurCDoctu\n# 8F4QOgTAWyh8EZIwaKCliFRSynDpv3JTUwtfZkxo6K6nce1RhCWFAsMvDZL8Dgc0\n# yvgJ38BRsFOtkRuAGSf6ZUwTO8JJRRIFnpUzXflAnGivK9M13D5GEQMmIl6U9Pvk\n# sxSmbIUfc2SGJGCJD4I=\n# -----END CERTIFICATE-----\n" } ], "title": "Collect logs from Axonius API", "description": "Collecting logs via Axonius API." } ], "multiple": true, "deployment_modes": { "default": { "enabled": true }, "agentless": { "enabled": true } } } ], "data_streams": [ { "type": "logs", "dataset": "axonius.adapter", "ilm_policy": "logs-axonius.adapter-default_policy", "title": "Adapter", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Axonius API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field event.original.", "multi": false, "required": false, "show_user": true, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "axonius-adapter" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "30s" }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "Adapter", "description": "Collect Adapter logs from Axonius.", "enabled": true, "ingestion_method": "API" } ], "package": "axonius", "path": "adapter" }, { "type": "logs", "dataset": "axonius.alert_finding", "ilm_policy": "logs-axonius.alert_finding-default_policy", "title": "Alert Findings", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Axonius API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "batch_size", "type": "integer", "title": "Batch Size", "description": "Batch size for the response of the Axonius API. The batch size can range from a minimum of 1 to a maximum of 2000.", "multi": false, "required": true, "show_user": true, "default": 2000 }, { "name": "asset_type_list", "type": "text", "title": "Asset Types", "description": "List of asset types to collect from the Axonius API.", "multi": true, "required": true, "show_user": false, "default": [ "alert_findings" ] }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "axonius-alert_finding" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "5m" }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "Alert Findings", "description": "Collect Alert Finding logs from Axonius.", "enabled": true, "ingestion_method": "API" } ], "package": "axonius", "path": "alert_finding" }, { "type": "logs", "dataset": "axonius.application", "ilm_policy": "logs-axonius.application-default_policy", "title": "Application", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Axonius API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "batch_size", "type": "integer", "title": "Batch Size", "description": "Batch size for the response of the Axonius API. The batch size can range from a minimum of 1 to a maximum of 2000.", "multi": false, "required": true, "show_user": true, "default": 2000 }, { "name": "asset_type_list", "type": "text", "title": "Asset Types", "description": "List of asset types to collect from the Axonius API. Do not modify.", "multi": true, "required": true, "show_user": false, "default": [ "expenses", "business_applications", "software", "saas_applications", "application_settings", "licenses", "admin_managed_extensions", "user_initiated_extensions", "application_addons", "admin_managed_extension_instances", "user_initiated_extension_instances", "application_addon_instances", "application_keys", "audit_activities", "urls", "application_resources", "secrets" ] }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "axonius-application" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "5m" }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "Application", "description": "Collect Application logs from Axonius.", "enabled": true, "ingestion_method": "API" } ], "package": "axonius", "path": "application" }, { "type": "logs", "dataset": "axonius.compute", "ilm_policy": "logs-axonius.compute-default_policy", "title": "Compute", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Axonius API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "batch_size", "type": "integer", "title": "Batch Size", "description": "Batch size for the response of the Axonius API. The batch size can range from a minimum of 1 to a maximum of 2000.", "multi": false, "required": true, "show_user": true, "default": 2000 }, { "name": "asset_type_list", "type": "text", "title": "Asset Types", "description": "List of asset types to collect from the Axonius API. Do not modify.", "multi": true, "required": true, "show_user": false, "default": [ "devices", "compute_services", "databases", "containers", "serverless_functions", "compute_images", "configurations" ] }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "axonius-compute" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "5m" }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "Compute", "description": "Collect Compute logs from Axonius.", "enabled": true, "ingestion_method": "API" } ], "package": "axonius", "path": "compute" }, { "type": "logs", "dataset": "axonius.exposure", "ilm_policy": "logs-axonius.exposure-default_policy", "title": "Exposure", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Axonius API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "batch_size", "type": "integer", "title": "Batch Size", "description": "Batch size for the response of the Axonius API. The batch size can range from a minimum of 1 to a maximum of 2000.", "multi": false, "required": true, "show_user": true, "default": 2000 }, { "name": "asset_type_list", "type": "text", "title": "Asset Types", "description": "List of asset types to collect from the Axonius API. Do not modify.", "multi": true, "required": true, "show_user": false, "default": [ "vulnerability_instances", "vulnerabilities", "vulnerabilities_repository" ] }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "axonius-exposure" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "5m" }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "Exposure", "description": "Collect Exposure logs from Axonius.", "enabled": true, "ingestion_method": "API" } ], "package": "axonius", "path": "exposure" }, { "type": "logs", "dataset": "axonius.gateway", "ilm_policy": "logs-axonius.gateway-default_policy", "title": "Gateway", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Axonius API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field event.original.", "multi": false, "required": false, "show_user": true, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "axonius-gateway" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "30s" }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "Gateway", "description": "Collect Gateway logs from Axonius.", "enabled": true, "ingestion_method": "API" } ], "package": "axonius", "path": "gateway" }, { "type": "logs", "dataset": "axonius.identity", "ilm_policy": "logs-axonius.identity-default_policy", "title": "Identity", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Axonius API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "batch_size", "type": "integer", "title": "Batch Size", "description": "Batch size for the response of the Axonius API. The batch size can range from a minimum of 1 to a maximum of 2000.", "multi": false, "required": true, "show_user": true, "default": 2000 }, { "name": "asset_type_list", "type": "text", "title": "Asset Types", "description": "List of asset types to collect from the Axonius API. Do not modify.", "multi": true, "required": true, "show_user": false, "default": [ "users", "groups", "security_roles", "organizational_units", "accounts", "certificates", "permissions", "latest_rules", "profiles", "job_titles", "access_review_campaign_instances", "access_review_approval_items" ] }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "axonius-identity" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "5m" }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "Identity", "description": "Collect Identity logs from Axonius.", "enabled": true, "ingestion_method": "API" } ], "package": "axonius", "path": "identity" }, { "type": "logs", "dataset": "axonius.incident", "ilm_policy": "logs-axonius.incident-default_policy", "title": "Incidents", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Axonius API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "batch_size", "type": "integer", "title": "Batch Size", "description": "Batch size for the response of the Axonius API. The batch size can range from a minimum of 1 to a maximum of 2000.", "multi": false, "required": true, "show_user": true, "default": 2000 }, { "name": "asset_type_list", "type": "text", "title": "Asset Types", "description": "List of asset types to collect from the Axonius API.", "multi": true, "required": true, "show_user": false, "default": [ "incidents" ] }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "axonius-incident" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "5m" }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "Incidents", "description": "Collect Incident logs from Axonius.", "enabled": true, "ingestion_method": "API" } ], "package": "axonius", "path": "incident" }, { "type": "logs", "dataset": "axonius.network", "ilm_policy": "logs-axonius.network-default_policy", "title": "Network", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Axonius API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "batch_size", "type": "integer", "title": "Batch Size", "description": "Batch size for the response of the Axonius API. The batch size can range from a minimum of 1 to a maximum of 2000.", "multi": false, "required": true, "show_user": true, "default": 2000 }, { "name": "asset_type_list", "type": "text", "title": "Asset Types", "description": "List of asset types to collect from the Axonius API. Do not modify.", "multi": true, "required": true, "show_user": false, "default": [ "networks", "load_balancers", "network_services", "network_devices", "firewalls", "nat_rules", "network_routes" ] }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "axonius-network" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "5m" }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "Network", "description": "Collect Network logs from Axonius.", "enabled": true, "ingestion_method": "API" } ], "package": "axonius", "path": "network" }, { "type": "logs", "dataset": "axonius.storage", "ilm_policy": "logs-axonius.storage-default_policy", "title": "Storage", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Axonius API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "batch_size", "type": "integer", "title": "Batch Size", "description": "Batch size for the response of the Axonius API. The batch size can range from a minimum of 1 to a maximum of 2000.", "multi": false, "required": true, "show_user": true, "default": 2000 }, { "name": "asset_type_list", "type": "text", "title": "Asset Types", "description": "List of asset types to collect from the Axonius API. Do not modify.", "multi": true, "required": true, "show_user": false, "default": [ "object_storages", "file_systems", "disks" ] }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "axonius-storage" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "5m" }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "Storage", "description": "Collect Storage logs from Axonius.", "enabled": true, "ingestion_method": "API" } ], "package": "axonius", "path": "storage" }, { "type": "logs", "dataset": "axonius.ticket", "ilm_policy": "logs-axonius.ticket-default_policy", "title": "Ticket", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Axonius API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "batch_size", "type": "integer", "title": "Batch Size", "description": "Batch size for the response of the Axonius API. The batch size can range from a minimum of 1 to a maximum of 2000.", "multi": false, "required": true, "show_user": true, "default": 2000 }, { "name": "asset_type_list", "type": "text", "title": "Asset Types", "description": "List of asset types to collect from the Axonius API. Do not modify.", "multi": true, "required": true, "show_user": false, "default": [ "tickets", "cases" ] }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "axonius-ticket" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "5m" }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "Ticket", "description": "Collect Ticket logs from Axonius.", "enabled": true, "ingestion_method": "API" } ], "package": "axonius", "path": "ticket" }, { "type": "logs", "dataset": "axonius.user", "ilm_policy": "logs-axonius.user-default_policy", "title": "User", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Axonius API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field event.original.", "multi": false, "required": false, "show_user": true, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "axonius-user" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "30s" }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "User", "description": "Collect User logs from Axonius.", "enabled": true, "ingestion_method": "API" } ], "package": "axonius", "path": "user" } ] }