{ "name": "hpe_aruba_cx", "title": "HPE Aruba CX", "version": "0.4.2", "release": "beta", "description": "Collect logs from HPE Aruba CX with Elastic Agent", "type": "integration", "download": "/epr/hpe_aruba_cx/hpe_aruba_cx-0.4.2.zip", "path": "/package/hpe_aruba_cx/0.4.2", "icons": [ { "src": "/img/aruba-networks-logo.svg", "path": "/package/hpe_aruba_cx/0.4.2/img/aruba-networks-logo.svg", "title": "Aruba Networks Logo", "size": "800x800", "type": "image/svg+xml" } ], "conditions": { "kibana": { "version": "^8.15.0 || ^9.0.0" }, "elastic": { "subscription": "basic" } }, "owner": { "type": "elastic", "github": "elastic/integration-experience" }, "categories": [ "config_management", "network", "security" ], "signature_path": "/epr/hpe_aruba_cx/hpe_aruba_cx-0.4.2.zip.sig", "format_version": "3.2.1", "readme": "/package/hpe_aruba_cx/0.4.2/docs/README.md", "license": "basic", "screenshots": [ { "src": "/img/dashboard.png", "path": "/package/hpe_aruba_cx/0.4.2/img/dashboard.png", "title": "Sample screenshot", "size": "1931x1067", "type": "image/png" } ], "assets": [ "/package/hpe_aruba_cx/0.4.2/LICENSE.txt", "/package/hpe_aruba_cx/0.4.2/changelog.yml", "/package/hpe_aruba_cx/0.4.2/manifest.yml", "/package/hpe_aruba_cx/0.4.2/validation.yml", "/package/hpe_aruba_cx/0.4.2/docs/README.md", "/package/hpe_aruba_cx/0.4.2/img/aruba-networks-logo.svg", "/package/hpe_aruba_cx/0.4.2/img/dashboard.png", "/package/hpe_aruba_cx/0.4.2/data_stream/log/manifest.yml", "/package/hpe_aruba_cx/0.4.2/data_stream/log/sample_event.json", "/package/hpe_aruba_cx/0.4.2/docs/knowledge_base/service_info.md", "/package/hpe_aruba_cx/0.4.2/kibana/dashboard/hpe_aruba_cx-2ec9d647-9d43-482a-beb7-5df529b86747.json", "/package/hpe_aruba_cx/0.4.2/kibana/tag/hpe_aruba_cx-73df3ba8-270e-48b8-b050-5080ab7cb7e4.json", "/package/hpe_aruba_cx/0.4.2/kibana/tag/hpe_aruba_cx-f2abcc29-4bd2-4df3-a62f-46bec069f3f8.json", "/package/hpe_aruba_cx/0.4.2/data_stream/log/fields/agent.yml", "/package/hpe_aruba_cx/0.4.2/data_stream/log/fields/base-fields.yml", "/package/hpe_aruba_cx/0.4.2/data_stream/log/fields/ecs.yml", "/package/hpe_aruba_cx/0.4.2/data_stream/log/fields/fields.yml", "/package/hpe_aruba_cx/0.4.2/data_stream/log/agent/stream/filestream.yml.hbs", "/package/hpe_aruba_cx/0.4.2/data_stream/log/agent/stream/tcp.yml.hbs", "/package/hpe_aruba_cx/0.4.2/data_stream/log/agent/stream/udp.yml.hbs", "/package/hpe_aruba_cx/0.4.2/data_stream/log/elasticsearch/ingest_pipeline/default.yml" ], "policy_templates": [ { "name": "hpe_aruba_cx", "title": "HPE Aruba CX logs", "description": "Collect HPE Aruba CX logs", "inputs": [ { "type": "tcp", "title": "Collect logs from HPE Aruba CX via TCP", "description": "Collecting logs from HPE Aruba CX via TCP" }, { "type": "udp", "title": "Collect logs from HPE Aruba CX via UDP", "description": "Collecting logs from HPE Aruba CX via UDP" }, { "type": "filestream", "title": "Collect logs from HPE Aruba CX via file", "description": "Collect logs from HPE Aruba CX instances using filestream input." } ], "multiple": true } ], "data_streams": [ { "type": "logs", "dataset": "hpe_aruba_cx.log", "title": "Aruba CX logs", "release": "beta", "ingest_pipeline": "default", "streams": [ { "input": "tcp", "vars": [ { "name": "listen_address", "type": "text", "title": "Listen Address", "description": "The bind address to listen for TCP connections. Set to `0.0.0.0` to bind to all available interfaces.", "multi": false, "required": true, "show_user": true, "default": "localhost" }, { "name": "listen_port", "type": "integer", "title": "Listen Port", "description": "The TCP port number to listen on default is 1470.", "multi": false, "required": true, "show_user": true, "default": 1470 }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "hpe-aruba-cx", "forwarded" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.\n", "multi": false, "required": false, "show_user": false }, { "name": "ssl", "type": "yaml", "title": "SSL Configuration", "description": "SSL configuration options. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-ssl.html#ssl-common-config) for details.", "multi": false, "required": false, "show_user": false, "default": "#certificate_authorities:\n# - |\n# -----BEGIN CERTIFICATE-----\n# MIIDCjCCAfKgAwIBAgITJ706Mu2wJlKckpIvkWxEHvEyijANBgkqhkiG9w0BAQsF\n# ADAUMRIwEAYDVQQDDAlsb2NhbGhvc3QwIBcNMTkwNzIyMTkyOTA0WhgPMjExOTA2\n# MjgxOTI5MDRaMBQxEjAQBgNVBAMMCWxvY2FsaG9zdDCCASIwDQYJKoZIhvcNAQEB\n# BQADggEPADCCAQoCggEBANce58Y/JykI58iyOXpxGfw0/gMvF0hUQAcUrSMxEO6n\n# fZRA49b4OV4SwWmA3395uL2eB2NB8y8qdQ9muXUdPBWE4l9rMZ6gmfu90N5B5uEl\n# 94NcfBfYOKi1fJQ9i7WKhTjlRkMCgBkWPkUokvBZFRt8RtF7zI77BSEorHGQCk9t\n# /D7BS0GJyfVEhftbWcFEAG3VRcoMhF7kUzYwp+qESoriFRYLeDWv68ZOvG7eoWnP\n# PsvZStEVEimjvK5NSESEQa9xWyJOmlOKXhkdymtcUd/nXnx6UTCFgnkgzSdTWV41\n# CI6B6aJ9svCTI2QuoIq2HxX/ix7OvW1huVmcyHVxyUECAwEAAaNTMFEwHQYDVR0O\n# BBYEFPwN1OceFGm9v6ux8G+DZ3TUDYxqMB8GA1UdIwQYMBaAFPwN1OceFGm9v6ux\n# 8G+DZ3TUDYxqMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAG5D\n# 874A4YI7YUwOVsVAdbWtgp1d0zKcPRR+r2OdSbTAV5/gcS3jgBJ3i1BN34JuDVFw\n# 3DeJSYT3nxy2Y56lLnxDeF8CUTUtVQx3CuGkRg1ouGAHpO/6OqOhwLLorEmxi7tA\n# H2O8mtT0poX5AnOAhzVy7QW0D/k4WaoLyckM5hUa6RtvgvLxOwA0U+VGurCDoctu\n# 8F4QOgTAWyh8EZIwaKCliFRSynDpv3JTUwtfZkxo6K6nce1RhCWFAsMvDZL8Dgc0\n# yvgJ38BRsFOtkRuAGSf6ZUwTO8JJRRIFnpUzXflAnGivK9M13D5GEQMmIl6U9Pvk\n# sxSmbIUfc2SGJGCJD4I=\n# -----END CERTIFICATE-----\n" }, { "name": "tcp_options", "type": "yaml", "title": "Custom TCP Options", "description": "Specify custom configuration options for the TCP input. See [TCP](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-tcp.html) for details.", "multi": false, "required": false, "show_user": false, "default": "#max_connections: 1\n#framing: delimiter\n#line_delimiter: \"\\n\"\n" } ], "template_path": "tcp.yml.hbs", "title": "HPE Aruba CX logs (tcp)", "description": "Collect Aruba CX logs using tcp input", "enabled": true, "ingestion_method": "Network Protocol" }, { "input": "udp", "vars": [ { "name": "listen_address", "type": "text", "title": "Listen Address", "description": "The bind address to listen for UDP connections. Set to `0.0.0.0` to bind to all available interfaces.", "multi": false, "required": true, "show_user": true, "default": "localhost" }, { "name": "listen_port", "type": "integer", "title": "Listen Port", "description": "The UDP port number to listen on default is 1024.", "multi": false, "required": true, "show_user": true, "default": 1024 }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "hpe-aruba-cx", "forwarded" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "udp_options", "type": "yaml", "title": "Custom UDP Options", "description": "Specify custom configuration options for the UDP input. See [UDP](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-udp.html) for details.", "multi": false, "required": false, "show_user": false, "default": "#read_buffer: 100MiB\n#max_message_size: 50KiB\n#timeout: 300s\n" }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.\n", "multi": false, "required": false, "show_user": false } ], "template_path": "udp.yml.hbs", "title": "Aruba CX logs (udp)", "description": "Collect Aruba CX logs", "enabled": true, "ingestion_method": "Network Protocol" }, { "input": "filestream", "vars": [ { "name": "paths", "type": "text", "title": "Paths", "multi": true, "required": true, "show_user": true, "default": [ "/var/log/audit/*.log" ] }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "hpe-aruba-cx", "forwarded" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "filestream.yml.hbs", "title": "Aruba CX logs (filestream)", "description": "Collect Aruba logs using the filestream input", "enabled": false, "ingestion_method": "File" } ], "package": "hpe_aruba_cx", "path": "log" } ] }