{
  "name": "dataminr_pulse",
  "title": "Dataminr Pulse",
  "version": "0.2.1",
  "release": "beta",
  "description": "Collect real-time alerts from Dataminr Pulse API",
  "type": "integration",
  "download": "/epr/dataminr_pulse/dataminr_pulse-0.2.1.zip",
  "path": "/package/dataminr_pulse/0.2.1",
  "icons": [
    {
      "src": "/img/Dataminr_Logo-Mark_Full-Color_RGB.svg",
      "path": "/package/dataminr_pulse/0.2.1/img/Dataminr_Logo-Mark_Full-Color_RGB.svg",
      "title": "Dataminr Pulse Logo",
      "size": "any",
      "type": "image/svg+xml"
    }
  ],
  "conditions": {
    "kibana": {
      "version": "^8.19.0 || ^9.0.0"
    },
    "elastic": {
      "subscription": "basic"
    }
  },
  "owner": {
    "type": "elastic",
    "github": "elastic/security-service-integrations"
  },
  "categories": [
    "security",
    "threat_intel"
  ],
  "signature_path": "/epr/dataminr_pulse/dataminr_pulse-0.2.1.zip.sig",
  "format_version": "3.3.2",
  "readme": "/package/dataminr_pulse/0.2.1/docs/README.md",
  "license": "basic",
  "assets": [
    "/package/dataminr_pulse/0.2.1/LICENSE.txt",
    "/package/dataminr_pulse/0.2.1/README.md",
    "/package/dataminr_pulse/0.2.1/changelog.yml",
    "/package/dataminr_pulse/0.2.1/manifest.yml",
    "/package/dataminr_pulse/0.2.1/docs/README.md",
    "/package/dataminr_pulse/0.2.1/img/Dataminr_Logo-Mark_Full-Color_RGB.svg",
    "/package/dataminr_pulse/0.2.1/img/logo.svc",
    "/package/dataminr_pulse/0.2.1/img/screenshot.png",
    "/package/dataminr_pulse/0.2.1/data_stream/alerts/manifest.yml",
    "/package/dataminr_pulse/0.2.1/data_stream/alerts/sample_event.json",
    "/package/dataminr_pulse/0.2.1/kibana/dashboard/dataminr_pulse-3364fad8-deb4-40cf-9dfe-50bf4d5a1823.json",
    "/package/dataminr_pulse/0.2.1/kibana/dashboard/dataminr_pulse-3364fad8-deb4-40cf-9dfe-50bf4d5a1824.json",
    "/package/dataminr_pulse/0.2.1/kibana/index_pattern/eb1259c1-a4fb-43c5-a993-dc31b973c044.json",
    "/package/dataminr_pulse/0.2.1/data_stream/alerts/fields/base-fields.yml",
    "/package/dataminr_pulse/0.2.1/data_stream/alerts/fields/fields.yml",
    "/package/dataminr_pulse/0.2.1/data_stream/alerts/agent/stream/stream.yml.hbs",
    "/package/dataminr_pulse/0.2.1/data_stream/alerts/elasticsearch/ingest_pipeline/default.yml"
  ],
  "policy_templates": [
    {
      "name": "dataminr_pulse",
      "title": "Dataminr Pulse Alerts",
      "description": "Collect real-time alerts from Dataminr Pulse API",
      "inputs": [
        {
          "type": "cel",
          "title": "Dataminr Pulse Alerts via CEL",
          "description": "Collect alerts using Common Expression Language (CEL) input"
        }
      ],
      "multiple": true
    }
  ],
  "data_streams": [
    {
      "type": "logs",
      "dataset": "dataminr_pulse.alerts",
      "title": "Dataminr Pulse Alerts",
      "release": "beta",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "cel",
          "vars": [
            {
              "name": "url",
              "type": "text",
              "title": "API URL",
              "description": "The base URL for the Dataminr Pulse API alerts endpoint.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "https://api.dataminr.com/pulse/v1/alerts"
            },
            {
              "name": "base_url",
              "type": "text",
              "title": "Base URL",
              "description": "The base URL without the endpoint path.",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "https://api.dataminr.com/pulse"
            },
            {
              "name": "auth_url",
              "type": "text",
              "title": "Authentication URL",
              "description": "The OAuth token endpoint URL.",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "https://userauth.dataminr.com/auth/2/token"
            },
            {
              "name": "token_expiry_buffer",
              "type": "text",
              "title": "Token Expiry Buffer",
              "description": "How long before the token expires to refresh it (e.g. 5m, 30m).",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "5m"
            },
            {
              "name": "client_id",
              "type": "text",
              "title": "Client ID",
              "description": "Client ID from Dataminr for token generation.",
              "multi": false,
              "required": true,
              "show_user": true
            },
            {
              "name": "client_secret",
              "type": "password",
              "title": "Client Secret",
              "description": "Client secret from Dataminr for token generation.",
              "multi": false,
              "required": true,
              "show_user": true
            },
            {
              "name": "interval",
              "type": "text",
              "title": "Interval",
              "description": "How often to poll for new alerts (e.g. 1m, 5m, 15m, 30m).",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "15m"
            },
            {
              "name": "page_size",
              "type": "integer",
              "title": "Page Size",
              "description": "Maximum number of alerts per request (1-100).",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "40"
            },
            {
              "name": "enable_request_tracer",
              "type": "bool",
              "title": "Enable request tracing",
              "multi": false,
              "required": false,
              "show_user": false,
              "default": false
            },
            {
              "name": "preserve_original_event",
              "type": "bool",
              "title": "Preserve original event",
              "description": "Preserves a raw copy of the original event, added to the field `event.original`.",
              "multi": false,
              "required": false,
              "show_user": true,
              "default": false
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false,
              "default": [
                "forwarded",
                "dataminr-pulse-alerts"
              ]
            },
            {
              "name": "processors",
              "type": "yaml",
              "title": "Processors",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Dataminr Pulse Alerts",
          "description": "Collect alerts from Dataminr Pulse API",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "dataminr_pulse",
      "path": "alerts"
    }
  ]
}