{ "name": "island_browser", "title": "Island Browser", "version": "1.1.1", "release": "ga", "description": "Collect logs from Island Browser with Elastic Agent.", "type": "integration", "download": "/epr/island_browser/island_browser-1.1.1.zip", "path": "/package/island_browser/1.1.1", "icons": [ { "src": "/img/island-browser-logo.svg", "path": "/package/island_browser/1.1.1/img/island-browser-logo.svg", "title": "Island Browser logo", "size": "32x32", "type": "image/svg+xml" } ], "conditions": { "kibana": { "version": "~8.18.8 || ^8.19.5 || ~9.0.8 || ^9.1.5" }, "elastic": { "subscription": "basic" } }, "owner": { "type": "elastic", "github": "elastic/security-service-integrations" }, "categories": [ "security" ], "signature_path": "/epr/island_browser/island_browser-1.1.1.zip.sig", "format_version": "3.3.2", "readme": "/package/island_browser/1.1.1/docs/README.md", "license": "basic", "screenshots": [ { "src": "/img/island-browser-audit-dashboard.png", "path": "/package/island_browser/1.1.1/img/island-browser-audit-dashboard.png", "title": "Audit Dashboard", "size": "600x600", "type": "image/png" }, { "src": "/img/island-browser-admin-actions-dashboard.png", "path": "/package/island_browser/1.1.1/img/island-browser-admin-actions-dashboard.png", "title": "Admin Actions Dashboard", "size": "600x600", "type": "image/png" }, { "src": "/img/island-browser-device-dashboard.png", "path": "/package/island_browser/1.1.1/img/island-browser-device-dashboard.png", "title": "Device Dashboard", "size": "600x600", "type": "image/png" }, { "src": "/img/island-browser-user-dashboard.png", "path": "/package/island_browser/1.1.1/img/island-browser-user-dashboard.png", "title": "User Dashboard", "size": "600x600", "type": "image/png" }, { "src": "/img/island-browser-compromised-credential-dashboard.png", "path": "/package/island_browser/1.1.1/img/island-browser-compromised-credential-dashboard.png", "title": "Compromised Credential Dashboard", "size": "600x600", "type": "image/png" } ], "assets": [ "/package/island_browser/1.1.1/LICENSE.txt", "/package/island_browser/1.1.1/changelog.yml", "/package/island_browser/1.1.1/manifest.yml", "/package/island_browser/1.1.1/validation.yml", "/package/island_browser/1.1.1/docs/README.md", "/package/island_browser/1.1.1/img/island-browser-admin-actions-dashboard.png", "/package/island_browser/1.1.1/img/island-browser-audit-dashboard.png", "/package/island_browser/1.1.1/img/island-browser-compromised-credential-dashboard.png", "/package/island_browser/1.1.1/img/island-browser-device-dashboard.png", "/package/island_browser/1.1.1/img/island-browser-logo.svg", "/package/island_browser/1.1.1/img/island-browser-user-dashboard.png", "/package/island_browser/1.1.1/data_stream/admin_actions/manifest.yml", "/package/island_browser/1.1.1/data_stream/admin_actions/sample_event.json", "/package/island_browser/1.1.1/data_stream/audit/manifest.yml", "/package/island_browser/1.1.1/data_stream/audit/sample_event.json", "/package/island_browser/1.1.1/data_stream/compromised_credential/manifest.yml", "/package/island_browser/1.1.1/data_stream/compromised_credential/sample_event.json", "/package/island_browser/1.1.1/data_stream/device/lifecycle.yml", "/package/island_browser/1.1.1/data_stream/device/manifest.yml", "/package/island_browser/1.1.1/data_stream/device/sample_event.json", "/package/island_browser/1.1.1/data_stream/user/lifecycle.yml", "/package/island_browser/1.1.1/data_stream/user/manifest.yml", "/package/island_browser/1.1.1/data_stream/user/sample_event.json", "/package/island_browser/1.1.1/kibana/dashboard/island_browser-1bcda810-8ace-46ea-9a41-f9179ac63f36.json", "/package/island_browser/1.1.1/kibana/dashboard/island_browser-86a8fe6b-5da7-4584-a376-ac52a9d4d7a2.json", "/package/island_browser/1.1.1/kibana/dashboard/island_browser-8a93ddf1-8cd3-4316-bf78-eaaa15af9e8c.json", "/package/island_browser/1.1.1/kibana/dashboard/island_browser-c82199e5-3b95-4eb1-8e58-0a7d85f4614b.json", "/package/island_browser/1.1.1/kibana/dashboard/island_browser-de262ab3-5ed3-4735-baef-72cfb0a50d1d.json", "/package/island_browser/1.1.1/kibana/search/island_browser-0793261b-feeb-4b22-87c2-7c478de25333.json", "/package/island_browser/1.1.1/kibana/search/island_browser-6483b021-105e-40ce-8e13-8afb91123326.json", "/package/island_browser/1.1.1/kibana/search/island_browser-84eb0548-660b-42af-9af1-a762aaa6bb84.json", "/package/island_browser/1.1.1/kibana/search/island_browser-dc4eff97-2d93-4db7-b1c6-2e6e38699949.json", "/package/island_browser/1.1.1/data_stream/admin_actions/fields/base-fields.yml", "/package/island_browser/1.1.1/data_stream/admin_actions/fields/beats.yml", "/package/island_browser/1.1.1/data_stream/admin_actions/fields/ecs.yml", "/package/island_browser/1.1.1/data_stream/admin_actions/fields/fields.yml", "/package/island_browser/1.1.1/data_stream/audit/fields/base-fields.yml", "/package/island_browser/1.1.1/data_stream/audit/fields/beats.yml", "/package/island_browser/1.1.1/data_stream/audit/fields/ecs.yml", "/package/island_browser/1.1.1/data_stream/audit/fields/fields.yml", "/package/island_browser/1.1.1/data_stream/compromised_credential/fields/base-fields.yml", "/package/island_browser/1.1.1/data_stream/compromised_credential/fields/beats.yml", "/package/island_browser/1.1.1/data_stream/compromised_credential/fields/ecs.yml", "/package/island_browser/1.1.1/data_stream/compromised_credential/fields/fields.yml", "/package/island_browser/1.1.1/data_stream/compromised_credential/fields/is-transform-source-true.yml", "/package/island_browser/1.1.1/data_stream/device/fields/base-fields.yml", "/package/island_browser/1.1.1/data_stream/device/fields/beats.yml", "/package/island_browser/1.1.1/data_stream/device/fields/ecs.yml", "/package/island_browser/1.1.1/data_stream/device/fields/fields.yml", "/package/island_browser/1.1.1/data_stream/device/fields/is-transform-source-true.yml", "/package/island_browser/1.1.1/data_stream/user/fields/base-fields.yml", "/package/island_browser/1.1.1/data_stream/user/fields/beats.yml", "/package/island_browser/1.1.1/data_stream/user/fields/ecs.yml", "/package/island_browser/1.1.1/data_stream/user/fields/fields.yml", "/package/island_browser/1.1.1/data_stream/user/fields/is-transform-source-true.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_compromised_credential/manifest.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_compromised_credential/transform.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_device/manifest.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_device/transform.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_user/manifest.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_user/transform.yml", "/package/island_browser/1.1.1/data_stream/admin_actions/agent/stream/cel.yml.hbs", "/package/island_browser/1.1.1/data_stream/admin_actions/elasticsearch/ingest_pipeline/default.yml", "/package/island_browser/1.1.1/data_stream/audit/agent/stream/cel.yml.hbs", "/package/island_browser/1.1.1/data_stream/audit/elasticsearch/ingest_pipeline/default.yml", "/package/island_browser/1.1.1/data_stream/compromised_credential/agent/stream/cel.yml.hbs", "/package/island_browser/1.1.1/data_stream/compromised_credential/elasticsearch/ingest_pipeline/default.yml", "/package/island_browser/1.1.1/data_stream/device/agent/stream/cel.yml.hbs", "/package/island_browser/1.1.1/data_stream/device/elasticsearch/ilm/default_policy.json", "/package/island_browser/1.1.1/data_stream/device/elasticsearch/ingest_pipeline/default.yml", "/package/island_browser/1.1.1/data_stream/user/agent/stream/cel.yml.hbs", "/package/island_browser/1.1.1/data_stream/user/elasticsearch/ilm/default_policy.json", "/package/island_browser/1.1.1/data_stream/user/elasticsearch/ingest_pipeline/default.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_compromised_credential/fields/base-fields.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_compromised_credential/fields/beats.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_compromised_credential/fields/ecs.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_compromised_credential/fields/fields.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_compromised_credential/fields/is-transform-source-false.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_device/fields/base-fields.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_device/fields/beats.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_device/fields/ecs.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_device/fields/fields.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_device/fields/is-transform-source-false.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_user/fields/base-fields.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_user/fields/beats.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_user/fields/ecs.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_user/fields/fields.yml", "/package/island_browser/1.1.1/elasticsearch/transform/latest_user/fields/is-transform-source-false.yml" ], "policy_templates": [ { "name": "island_browser", "title": "Island Browser", "description": "Collect logs from Island Browser.", "inputs": [ { "type": "cel", "vars": [ { "name": "url", "type": "text", "title": "URL", "description": "The URL for the Island Enterprise Browser API.", "multi": false, "required": true, "show_user": true }, { "name": "api_key", "type": "password", "title": "API Key", "description": "The API key for an Island Enterprise Browser account with administrator access.", "multi": false, "required": true, "show_user": true }, { "name": "proxy_url", "type": "text", "title": "Proxy URL", "description": "URL to proxy connections in the form of http[s]://:@:. Please ensure your username and password are in URL encoded format.", "multi": false, "required": false, "show_user": false }, { "name": "ssl", "type": "yaml", "title": "SSL Configuration", "description": "SSL configuration options. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-ssl.html#ssl-common-config) for details.", "multi": false, "required": false, "show_user": false, "default": "#certificate_authorities:\n# - |\n# -----BEGIN CERTIFICATE-----\n# MIIDCjCCAfKgAwIBAgITJ706Mu2wJlKckpIvkWxEHvEyijANBgkqhkiG9w0BAQsF\n# ADAUMRIwEAYDVQQDDAlsb2NhbGhvc3QwIBcNMTkwNzIyMTkyOTA0WhgPMjExOTA2\n# MjgxOTI5MDRaMBQxEjAQBgNVBAMMCWxvY2FsaG9zdDCCASIwDQYJKoZIhvcNAQEB\n# BQADggEPADCCAQoCggEBANce58Y/JykI58iyOXpxGfw0/gMvF0hUQAcUrSMxEO6n\n# fZRA49b4OV4SwWmA3395uL2eB2NB8y8qdQ9muXUdPBWE4l9rMZ6gmfu90N5B5uEl\n# 94NcfBfYOKi1fJQ9i7WKhTjlRkMCgBkWPkUokvBZFRt8RtF7zI77BSEorHGQCk9t\n# /D7BS0GJyfVEhftbWcFEAG3VRcoMhF7kUzYwp+qESoriFRYLeDWv68ZOvG7eoWnP\n# PsvZStEVEimjvK5NSESEQa9xWyJOmlOKXhkdymtcUd/nXnx6UTCFgnkgzSdTWV41\n# CI6B6aJ9svCTI2QuoIq2HxX/ix7OvW1huVmcyHVxyUECAwEAAaNTMFEwHQYDVR0O\n# BBYEFPwN1OceFGm9v6ux8G+DZ3TUDYxqMB8GA1UdIwQYMBaAFPwN1OceFGm9v6ux\n# 8G+DZ3TUDYxqMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAG5D\n# 874A4YI7YUwOVsVAdbWtgp1d0zKcPRR+r2OdSbTAV5/gcS3jgBJ3i1BN34JuDVFw\n# 3DeJSYT3nxy2Y56lLnxDeF8CUTUtVQx3CuGkRg1ouGAHpO/6OqOhwLLorEmxi7tA\n# H2O8mtT0poX5AnOAhzVy7QW0D/k4WaoLyckM5hUa6RtvgvLxOwA0U+VGurCDoctu\n# 8F4QOgTAWyh8EZIwaKCliFRSynDpv3JTUwtfZkxo6K6nce1RhCWFAsMvDZL8Dgc0\n# yvgJ38BRsFOtkRuAGSf6ZUwTO8JJRRIFnpUzXflAnGivK9M13D5GEQMmIl6U9Pvk\n# sxSmbIUfc2SGJGCJD4I=\n# -----END CERTIFICATE-----\n" } ], "title": "Collect logs from Island Browser API", "description": "Collecting logs via Island Browser API." } ], "multiple": true, "deployment_modes": { "default": { "enabled": true }, "agentless": { "enabled": true } } } ], "data_streams": [ { "type": "logs", "dataset": "island_browser.admin_actions", "title": "Collect Admin Action logs from Island Browser.", "release": "ga", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "initial_interval", "type": "text", "title": "Initial Interval", "description": "How far back to pull the admin action events from Island Browser API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Island Browser API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "30m" }, { "name": "batch_size", "type": "integer", "title": "Batch Size", "description": "Page size for the response of the Island Browser API. Maximum allowed value is 200.", "multi": false, "required": true, "show_user": false, "default": 200 }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field event.original.", "multi": false, "required": false, "show_user": true, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "island_browser-admin_actions" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "30s" }, { "name": "preserve_duplicate_custom_fields", "type": "bool", "title": "Preserve duplicate custom fields", "description": "Preserve island_browser.admin_actions fields that were copied to Elastic Common Schema (ECS) fields.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "Island Browser Admin Action Logs", "description": "Collect Island Browser Admin Action Logs.", "enabled": false, "ingestion_method": "API" } ], "package": "island_browser", "path": "admin_actions" }, { "type": "logs", "dataset": "island_browser.audit", "title": "Collect Audit logs from Island Browser.", "release": "ga", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "initial_interval", "type": "text", "title": "Initial Interval", "description": "How far back to pull the audit events from Island Browser API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Island Browser API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "30m" }, { "name": "batch_size", "type": "integer", "title": "Batch Size", "description": "Page size for the response of the Island Browser API. Maximum allowed value is 100.", "multi": false, "required": true, "show_user": false, "default": 100 }, { "name": "resource_rate_limit_limit", "type": "text", "title": "Resource Rate Limit", "description": "In requests per second. This controls polling frequency.", "multi": false, "required": true, "show_user": false, "default": "0.01" }, { "name": "resource_rate_limit_burst", "type": "integer", "title": "Resource Rate Limit Burst", "description": "In requests. The maximum number of requests that can be immediately made following an idle period.", "multi": false, "required": true, "show_user": false, "default": 1 }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field event.original.", "multi": false, "required": false, "show_user": true, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "island_browser-audit" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "30s" }, { "name": "preserve_duplicate_custom_fields", "type": "bool", "title": "Preserve duplicate custom fields", "description": "Preserve island_browser.audit fields that were copied to Elastic Common Schema (ECS) fields.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "Island Browser Audit Logs", "description": "Collect Island Browser Audit Logs.", "enabled": false, "ingestion_method": "API" } ], "package": "island_browser", "path": "audit" }, { "type": "logs", "dataset": "island_browser.compromised_credential", "title": "Collect Compromised Credential logs from Island Browser.", "release": "ga", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "initial_interval", "type": "text", "title": "Initial Interval", "description": "How far back to pull the Compromised Credential events from Island Browser API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Island Browser API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "1h" }, { "name": "batch_size", "type": "integer", "title": "Batch Size", "description": "Page size for the response of the Island Browser API.", "multi": false, "required": true, "show_user": false, "default": 100 }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field event.original.", "multi": false, "required": false, "show_user": true, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "island_browser-compromised_credential" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "30s" }, { "name": "preserve_duplicate_custom_fields", "type": "bool", "title": "Preserve duplicate custom fields", "description": "Preserve island_browser.compromised_credential fields that were copied to Elastic Common Schema (ECS) fields.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "Island Browser Compromised Credential Logs", "description": "Collect Island Browser Compromised Credential Logs.", "enabled": false, "ingestion_method": "API" } ], "package": "island_browser", "path": "compromised_credential" }, { "type": "logs", "dataset": "island_browser.device", "ilm_policy": "logs-island_browser.device-default_policy", "title": "Collect Device logs from Island Browser.", "release": "ga", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Island Browser API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "batch_size", "type": "integer", "title": "Batch Size", "description": "Page size for the response of the Island Browser API. Maximum allowed value is 100.", "multi": false, "required": true, "show_user": false, "default": 100 }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field event.original.", "multi": false, "required": false, "show_user": true, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "island_browser-device" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "30s" }, { "name": "preserve_duplicate_custom_fields", "type": "bool", "title": "Preserve duplicate custom fields", "description": "Preserve island_browser.device fields that were copied to Elastic Common Schema (ECS) fields.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "Island Browser Device Logs", "description": "Collect Island Browser Device Logs.", "enabled": false, "ingestion_method": "API" } ], "package": "island_browser", "path": "device" }, { "type": "logs", "dataset": "island_browser.user", "ilm_policy": "logs-island_browser.user-default_policy", "title": "Collect User logs from Island Browser.", "release": "ga", "ingest_pipeline": "default", "streams": [ { "input": "cel", "vars": [ { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the Island Browser API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": true, "default": "24h" }, { "name": "batch_size", "type": "integer", "title": "Batch Size", "description": "Page size for the response of the Island Browser API.", "multi": false, "required": true, "show_user": false, "default": 1000 }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. Disabling the request tracer will delete any stored traces. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-cel.html#_resource_tracer_enable) for details.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field event.original.", "multi": false, "required": false, "show_user": true, "default": false }, { "name": "tags", "type": "text", "title": "Tags", "description": "Tags for the data-stream.", "multi": true, "required": true, "show_user": false, "default": [ "forwarded", "island_browser-user" ] }, { "name": "http_client_timeout", "type": "text", "title": "HTTP Client Timeout", "description": "Duration before declaring that the HTTP client connection has timed out. Supported time units are ns, us, ms, s, m, h.", "multi": false, "required": true, "show_user": false, "default": "30s" }, { "name": "preserve_duplicate_custom_fields", "type": "bool", "title": "Preserve duplicate custom fields", "description": "Preserve island_browser.user fields that were copied to Elastic Common Schema (ECS) fields.", "multi": false, "required": false, "show_user": false, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed.", "multi": false, "required": false, "show_user": false } ], "template_path": "cel.yml.hbs", "title": "Island Browser User Logs", "description": "Collect Island Browser User Logs.", "enabled": false, "ingestion_method": "API" } ], "package": "island_browser", "path": "user" } ] }