{
  "name": "cisco_aironet",
  "title": "Cisco Aironet",
  "version": "1.15.0",
  "release": "ga",
  "description": "Integration for Cisco Aironet WLC Logs",
  "type": "integration",
  "download": "/epr/cisco_aironet/cisco_aironet-1.15.0.zip",
  "path": "/package/cisco_aironet/1.15.0",
  "icons": [
    {
      "src": "/img/cisco.svg",
      "path": "/package/cisco_aironet/1.15.0/img/cisco.svg",
      "title": "Cisco",
      "size": "32x32",
      "type": "image/svg+xml"
    }
  ],
  "conditions": {
    "kibana": {
      "version": "^8.11.0"
    },
    "elastic": {
      "subscription": "basic"
    }
  },
  "owner": {
    "type": "community",
    "github": "elastic/sec-deployment-and-devices"
  },
  "categories": [
    "security",
    "network"
  ],
  "signature_path": "/epr/cisco_aironet/cisco_aironet-1.15.0.zip.sig",
  "format_version": "3.0.3",
  "readme": "/package/cisco_aironet/1.15.0/docs/README.md",
  "license": "basic",
  "assets": [
    "/package/cisco_aironet/1.15.0/LICENSE.txt",
    "/package/cisco_aironet/1.15.0/changelog.yml",
    "/package/cisco_aironet/1.15.0/manifest.yml",
    "/package/cisco_aironet/1.15.0/validation.yml",
    "/package/cisco_aironet/1.15.0/docs/README.md",
    "/package/cisco_aironet/1.15.0/img/cisco.svg",
    "/package/cisco_aironet/1.15.0/kibana/tags.yml",
    "/package/cisco_aironet/1.15.0/data_stream/log/manifest.yml",
    "/package/cisco_aironet/1.15.0/data_stream/log/sample_event.json",
    "/package/cisco_aironet/1.15.0/data_stream/log/fields/agent.yml",
    "/package/cisco_aironet/1.15.0/data_stream/log/fields/aironet-fields.yml",
    "/package/cisco_aironet/1.15.0/data_stream/log/fields/base-fields.yml",
    "/package/cisco_aironet/1.15.0/data_stream/log/fields/ecs.yml",
    "/package/cisco_aironet/1.15.0/data_stream/log/agent/stream/stream.yml.hbs",
    "/package/cisco_aironet/1.15.0/data_stream/log/agent/stream/tcp.yml.hbs",
    "/package/cisco_aironet/1.15.0/data_stream/log/agent/stream/udp.yml.hbs",
    "/package/cisco_aironet/1.15.0/data_stream/log/elasticsearch/ingest_pipeline/default.yml"
  ],
  "policy_templates": [
    {
      "name": "cisco_aironet",
      "title": "Cisco Aironet logs",
      "description": "Collect logs from Cisco Aironet instances",
      "inputs": [
        {
          "type": "tcp",
          "title": "Collect logs from Cisco Aironet via TCP",
          "description": "Collecting logs from Cisco Aironet via TCP"
        },
        {
          "type": "udp",
          "title": "Collect logs from Cisco Aironet via UDP",
          "description": "Collecting logs from Cisco Aironet via UDP"
        },
        {
          "type": "logfile",
          "title": "Collect logs from Cisco Aironet via file",
          "description": "Collecting logs from Cisco Aironet via file"
        }
      ],
      "multiple": true
    }
  ],
  "data_streams": [
    {
      "type": "logs",
      "dataset": "cisco_aironet.log",
      "title": "Cisco Aironet logs",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "udp",
          "vars": [
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": true,
              "show_user": false,
              "default": [
                "cisco-aironet",
                "forwarded"
              ]
            },
            {
              "name": "udp_host",
              "type": "text",
              "title": "Listen Address",
              "description": "The bind address to listen for UDP connections. Set to `0.0.0.0` to bind to all available interfaces.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "0.0.0.0"
            },
            {
              "name": "udp_port",
              "type": "integer",
              "title": "Listen Port",
              "description": "The UDP port number to listen on.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": 9009
            },
            {
              "name": "preserve_original_event",
              "type": "bool",
              "title": "Preserve original event",
              "description": "Preserves a raw copy of the original event, added to the field `event.original`",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": false
            },
            {
              "name": "tz_offset",
              "type": "text",
              "title": "Timezone",
              "description": "IANA time zone or time offset (e.g. `+0200`) to use when interpreting syslog timestamps without a time zone.",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "UTC"
            },
            {
              "name": "udp_options",
              "type": "yaml",
              "title": "Custom UDP Options",
              "description": "Specify custom configuration options for the UDP input.",
              "multi": false,
              "required": false,
              "show_user": false,
              "default": "#read_buffer: 100MiB\n#max_message_size: 50KiB\n#timeout: 300s\n"
            },
            {
              "name": "processors",
              "type": "yaml",
              "title": "Processors",
              "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.\n",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "udp.yml.hbs",
          "title": "Cisco Aironet logs",
          "description": "Collect Cisco Aironet logs",
          "enabled": true,
          "ingestion_method": "Network Protocol"
        },
        {
          "input": "tcp",
          "vars": [
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": true,
              "show_user": false,
              "default": [
                "cisco-aironet",
                "forwarded"
              ]
            },
            {
              "name": "tcp_host",
              "type": "text",
              "title": "Listen Address",
              "description": "The bind address to listen for TCP connections. Set to `0.0.0.0` to bind to all available interfaces.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "0.0.0.0"
            },
            {
              "name": "tcp_port",
              "type": "integer",
              "title": "Listen Port",
              "description": "The TCP port number to listen on.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": 9009
            },
            {
              "name": "preserve_original_event",
              "type": "bool",
              "title": "Preserve original event",
              "description": "Preserves a raw copy of the original event, added to the field `event.original`",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": false
            },
            {
              "name": "tz_offset",
              "type": "text",
              "title": "Timezone",
              "description": "IANA time zone or time offset (e.g. `+0200`) to use when interpreting syslog timestamps without a time zone.",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "UTC"
            },
            {
              "name": "processors",
              "type": "yaml",
              "title": "Processors",
              "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.\n",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "ssl",
              "type": "yaml",
              "title": "SSL Configuration",
              "description": "i.e. certificate, keys, supported_protocols, verification_mode etc. See [SSL](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-ssl.html#ssl-server-config) for details.",
              "multi": false,
              "required": false,
              "show_user": false,
              "default": "#certificate: \"/etc/server/cert.pem\"\n#key: \"/etc/server/key.pem\"\n"
            },
            {
              "name": "tcp_options",
              "type": "yaml",
              "title": "Custom TCP Options",
              "description": "Specify custom configuration options for the TCP input. See [TCP](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-tcp.html) for details.",
              "multi": false,
              "required": false,
              "show_user": false,
              "default": "#max_connections: 1\n#framing: delimiter\n#line_delimiter: \"\\n\"\n"
            }
          ],
          "template_path": "tcp.yml.hbs",
          "title": "Cisco Aironet logs",
          "description": "Collect Cisco Aironet logs",
          "enabled": true,
          "ingestion_method": "Network Protocol"
        },
        {
          "input": "logfile",
          "vars": [
            {
              "name": "paths",
              "type": "text",
              "title": "Paths",
              "multi": true,
              "required": true,
              "show_user": true,
              "default": [
                "/var/log/cisco-aironet.log"
              ]
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": true,
              "show_user": false,
              "default": [
                "cisco-aironet",
                "forwarded"
              ]
            },
            {
              "name": "preserve_original_event",
              "type": "bool",
              "title": "Preserve original event",
              "description": "Preserves a raw copy of the original event, added to the field `event.original`",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": false
            },
            {
              "name": "tz_offset",
              "type": "text",
              "title": "Timezone",
              "description": "IANA time zone or time offset (e.g. `+0200`) to use when interpreting syslog timestamps without a time zone.",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "UTC"
            },
            {
              "name": "processors",
              "type": "yaml",
              "title": "Processors",
              "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Cisco Aironet logs",
          "description": "Collect Cisco Aironet logs from file",
          "enabled": false,
          "ingestion_method": "File"
        }
      ],
      "package": "cisco_aironet",
      "path": "log"
    }
  ]
}