{ "name": "hid_bravura_monitor", "title": "Bravura Monitor", "version": "1.20.0", "release": "ga", "description": "Collect logs from Bravura Security Fabric with Elastic Agent.", "type": "integration", "download": "/epr/hid_bravura_monitor/hid_bravura_monitor-1.20.0.zip", "path": "/package/hid_bravura_monitor/1.20.0", "icons": [ { "src": "/img/logo_hid_bravura_monitor.svg", "path": "/package/hid_bravura_monitor/1.20.0/img/logo_hid_bravura_monitor.svg", "title": "logo Bravura Monitor", "size": "50x50", "type": "image/svg+xml" } ], "conditions": { "kibana": { "version": "^8.7.1 || ^9.0.0" } }, "owner": { "type": "partner", "github": "elastic/sec-windows-platform" }, "categories": [ "security", "iam" ], "signature_path": "/epr/hid_bravura_monitor/hid_bravura_monitor-1.20.0.zip.sig", "format_version": "3.0.0", "readme": "/package/hid_bravura_monitor/1.20.0/docs/README.md", "license": "basic", "screenshots": [ { "src": "/img/kibana-hid_bravura_monitor-overview.png", "path": "/package/hid_bravura_monitor/1.20.0/img/kibana-hid_bravura_monitor-overview.png", "title": "Kibana Bravura Monitor overview", "size": "1907x971", "type": "image/png" }, { "src": "/img/kibana-hid_bravura_monitor-log-issues.png", "path": "/package/hid_bravura_monitor/1.20.0/img/kibana-hid_bravura_monitor-log-issues.png", "title": "Kibana Bravura Monitor dashboard example 1", "size": "1902x972", "type": "image/png" }, { "src": "/img/kibana-hid_bravura_monitor-db-replication.png", "path": "/package/hid_bravura_monitor/1.20.0/img/kibana-hid_bravura_monitor-db-replication.png", "title": "Kibana Bravura Monitor dashboard example 2", "size": "1903x969", "type": "image/png" }, { "src": "/img/kibana-hid_bravura_monitor-connectors.png", "path": "/package/hid_bravura_monitor/1.20.0/img/kibana-hid_bravura_monitor-connectors.png", "title": "Kibana Bravura Monitor dashboard example 3", "size": "1896x971", "type": "image/png" }, { "src": "/img/kibana-hid_bravura_monitor-admin.png", "path": "/package/hid_bravura_monitor/1.20.0/img/kibana-hid_bravura_monitor-admin.png", "title": "Kibana Bravura Monitor dashboard example 4", "size": "1904x971", "type": "image/png" } ], "assets": [ "/package/hid_bravura_monitor/1.20.0/LICENSE.txt", "/package/hid_bravura_monitor/1.20.0/changelog.yml", "/package/hid_bravura_monitor/1.20.0/manifest.yml", "/package/hid_bravura_monitor/1.20.0/validation.yml", "/package/hid_bravura_monitor/1.20.0/docs/README.md", "/package/hid_bravura_monitor/1.20.0/img/kibana-hid_bravura_monitor-admin.png", "/package/hid_bravura_monitor/1.20.0/img/kibana-hid_bravura_monitor-connectors.png", "/package/hid_bravura_monitor/1.20.0/img/kibana-hid_bravura_monitor-db-replication.png", "/package/hid_bravura_monitor/1.20.0/img/kibana-hid_bravura_monitor-log-issues.png", "/package/hid_bravura_monitor/1.20.0/img/kibana-hid_bravura_monitor-overview.png", "/package/hid_bravura_monitor/1.20.0/img/logo_hid_bravura_monitor.svg", "/package/hid_bravura_monitor/1.20.0/kibana/tags.yml", "/package/hid_bravura_monitor/1.20.0/data_stream/log/manifest.yml", "/package/hid_bravura_monitor/1.20.0/data_stream/log/sample_event.json", "/package/hid_bravura_monitor/1.20.0/data_stream/winlog/manifest.yml", "/package/hid_bravura_monitor/1.20.0/data_stream/winlog/sample_event.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-0665f160-f956-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-0db75ff0-f9f4-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-1a431f90-fa01-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-23a89d20-fa07-11eb-96cd-db0fb11a40f3.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-28db2060-fa02-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-3f403100-f9f4-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-49fa7e40-f9fc-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-4bf327b0-fa01-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-4ee19fa0-fa02-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-52cf42a0-fa04-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-578cb360-f9f3-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-6ebde770-fa02-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-7c5c1ef0-fa03-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-8187dcb0-fa04-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-91029280-0520-11ec-853c-2bf1ec8ddeef.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-a8739000-f9fd-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-a9ea8420-f9f3-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-b0fd1f50-06a2-11ec-a72d-e52b79e13120.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-b66f3780-fa03-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-b9bc5190-fa01-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-c5417bd0-f9fc-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-cc6c9cf0-fa06-11eb-96cd-db0fb11a40f3.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-d17be4f0-f9fa-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-d3a33820-fa02-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-d59177c0-f9fb-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-db22d850-fa00-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-e9fa5320-fa01-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/dashboard/hid_bravura_monitor-f8112090-fa03-11eb-a1ab-1964dffd1499.json", "/package/hid_bravura_monitor/1.20.0/kibana/search/hid_bravura_monitor-046c7b20-2b6d-11eb-abcf-effcd51852fa.json", "/package/hid_bravura_monitor/1.20.0/kibana/search/hid_bravura_monitor-2e254220-df55-11eb-9b6e-d57491399e2a.json", "/package/hid_bravura_monitor/1.20.0/kibana/search/hid_bravura_monitor-3aa4b370-25db-11eb-abcf-effcd51852fa.json", "/package/hid_bravura_monitor/1.20.0/kibana/search/hid_bravura_monitor-53be5e10-d909-11eb-9e70-edcbba448215.json", "/package/hid_bravura_monitor/1.20.0/kibana/search/hid_bravura_monitor-55100560-1add-11eb-abcf-effcd51852fa.json", "/package/hid_bravura_monitor/1.20.0/kibana/search/hid_bravura_monitor-77cbe8b0-de89-11eb-a272-2d62b237e243.json", "/package/hid_bravura_monitor/1.20.0/kibana/search/hid_bravura_monitor-83eacd90-1473-11eb-bb7b-bb041e8cf289.json", "/package/hid_bravura_monitor/1.20.0/kibana/search/hid_bravura_monitor-991d9760-1473-11eb-bb7b-bb041e8cf289.json", "/package/hid_bravura_monitor/1.20.0/kibana/search/hid_bravura_monitor-9a787d10-0521-11ec-853c-2bf1ec8ddeef.json", "/package/hid_bravura_monitor/1.20.0/kibana/search/hid_bravura_monitor-9e4165d0-1a1a-11eb-abcf-effcd51852fa.json", "/package/hid_bravura_monitor/1.20.0/kibana/search/hid_bravura_monitor-ad5f7180-1473-11eb-bb7b-bb041e8cf289.json", "/package/hid_bravura_monitor/1.20.0/kibana/search/hid_bravura_monitor-bfc7f7c0-1473-11eb-bb7b-bb041e8cf289.json", "/package/hid_bravura_monitor/1.20.0/kibana/search/hid_bravura_monitor-d1f2d8c0-1473-11eb-bb7b-bb041e8cf289.json", "/package/hid_bravura_monitor/1.20.0/kibana/search/hid_bravura_monitor-dca8bb20-d397-11eb-9e70-edcbba448215.json", "/package/hid_bravura_monitor/1.20.0/data_stream/log/fields/agent.yml", "/package/hid_bravura_monitor/1.20.0/data_stream/log/fields/base-fields.yml", "/package/hid_bravura_monitor/1.20.0/data_stream/log/fields/ecs.yml", "/package/hid_bravura_monitor/1.20.0/data_stream/log/fields/fields.yml", "/package/hid_bravura_monitor/1.20.0/data_stream/winlog/fields/agent.yml", "/package/hid_bravura_monitor/1.20.0/data_stream/winlog/fields/base-fields.yml", "/package/hid_bravura_monitor/1.20.0/data_stream/winlog/fields/beats.yml", "/package/hid_bravura_monitor/1.20.0/data_stream/winlog/fields/ecs.yml", "/package/hid_bravura_monitor/1.20.0/data_stream/winlog/fields/fields.yml", "/package/hid_bravura_monitor/1.20.0/data_stream/winlog/fields/winlog.yml", "/package/hid_bravura_monitor/1.20.0/data_stream/log/agent/stream/filestream.yml.hbs", "/package/hid_bravura_monitor/1.20.0/data_stream/log/elasticsearch/ingest_pipeline/default.yml", "/package/hid_bravura_monitor/1.20.0/data_stream/winlog/agent/stream/winlog.yml.hbs", "/package/hid_bravura_monitor/1.20.0/data_stream/winlog/elasticsearch/ingest_pipeline/default.yml" ], "policy_templates": [ { "name": "hid_bravura_monitor", "title": "Bravura Monitor logs", "description": "Collect logs from Bravura Security Fabric instances", "inputs": [ { "type": "filestream", "title": "Collect Bravura Monitor application logs (input: filestream)", "description": "Collecting application logs from Bravura Security Fabric instances (input: filestream)" }, { "type": "winlog", "title": "Collect Bravura Monitor event logs (input: winlog)", "description": "Collecting Windows Event logs from Bravura Security channel (input: winlog)" } ], "multiple": true } ], "data_streams": [ { "type": "logs", "dataset": "hid_bravura_monitor.log", "title": "Bravura Monitor", "release": "ga", "ingest_pipeline": "default", "streams": [ { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "Paths", "description": "Path to Bravura Security Fabric log files", "multi": true, "required": true, "show_user": true, "default": [ "C:/Program Files/Bravura Security/Bravura Security Fabric/Logs/default*/idmsuite*.log" ] }, { "name": "node", "type": "text", "title": "Node", "description": "If set to 0.0.0.0, `hid_bravura_monitor.node` will be set to the value of `host.name`", "multi": false, "required": true, "show_user": true, "default": "0.0.0.0" }, { "name": "instancename", "type": "text", "title": "Instance name", "multi": false, "required": true, "show_user": true, "default": "default" }, { "name": "timezone", "type": "text", "title": "Timezone", "multi": false, "required": true, "show_user": true, "default": "UTC" }, { "name": "environment", "type": "text", "title": "Environment", "multi": false, "required": true, "show_user": true, "default": "PRODUCTION" }, { "name": "instancetype", "type": "text", "title": "Instance type", "multi": false, "required": true, "show_user": true, "default": "Privilege-Identity-Password" }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Bravura Monitor", "description": "Collect Bravura Security Fabric logs using filestream input", "enabled": true, "ingestion_method": "File" } ], "package": "hid_bravura_monitor", "path": "log" }, { "type": "logs", "dataset": "hid_bravura_monitor.winlog", "title": "Bravura Security Fabric logs", "release": "ga", "ingest_pipeline": "default", "streams": [ { "input": "winlog", "vars": [ { "name": "event_id", "type": "text", "title": "Event ID", "description": "A list of included and excluded (blocked) event IDs. The value is a comma-separated list. The accepted values are single event IDs to include (e.g. 4624), a range of event IDs to include (e.g. 4700-4800), and single event IDs to exclude (e.g. -4735). Limit 22 IDs.", "multi": false, "required": false, "show_user": false }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "ignore_older", "type": "text", "title": "Ignore events older than", "description": "If this option is specified, events that are older than the specified amount of time are ignored. Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".", "multi": false, "required": false, "show_user": false, "default": "72h" }, { "name": "language", "type": "text", "title": "Language ID", "description": "The language ID the events will be rendered in. The language will be forced regardless of the system language. A complete list of language IDs can be found https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-lcid/a9eac961-e77d-41a6-90a5-ce1a8b0cdb9c[here]. It defaults to `0`, which indicates to use the system language. E.g.: 0x0409 for en-US", "multi": false, "required": false, "show_user": false, "default": 0 }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": false, "show_user": false }, { "name": "custom", "type": "yaml", "title": "Custom Configurations", "description": "YAML configuration options for winlog input. Be careful, this may break the integration.", "multi": false, "required": false, "show_user": false, "default": "# Winlog configuration example\n#batch_read_size: 100" } ], "template_path": "winlog.yml.hbs", "title": "Bravura Security Fabric Operational", "description": "Collect Hitachi-Hitachi ID Systems-Hitachi ID Suite/Operational channel logs", "enabled": true, "ingestion_method": "API" } ], "package": "hid_bravura_monitor", "path": "winlog" } ] }