{ "name": "jumpcloud", "title": "JumpCloud", "version": "1.17.1", "release": "ga", "description": "Collect logs from JumpCloud Directory as a Service", "type": "integration", "download": "/epr/jumpcloud/jumpcloud-1.17.1.zip", "path": "/package/jumpcloud/1.17.1", "icons": [ { "src": "/img/jumpcloud.svg", "path": "/package/jumpcloud/1.17.1/img/jumpcloud.svg", "title": "JumpCloud", "size": "100x100", "type": "image/svg+xml" } ], "conditions": { "kibana": { "version": "^8.13.0 || ^9.0.0" }, "elastic": { "subscription": "basic" } }, "owner": { "type": "community", "github": "elastic/security-service-integrations" }, "categories": [ "cloud", "security" ], "signature_path": "/epr/jumpcloud/jumpcloud-1.17.1.zip.sig", "format_version": "3.0.2", "readme": "/package/jumpcloud/1.17.1/docs/README.md", "license": "basic", "screenshots": [ { "src": "/img/sample-screenshot.png", "path": "/package/jumpcloud/1.17.1/img/sample-screenshot.png", "title": "Sample screenshot", "size": "600x600", "type": "image/png" } ], "assets": [ "/package/jumpcloud/1.17.1/LICENSE.txt", "/package/jumpcloud/1.17.1/changelog.yml", "/package/jumpcloud/1.17.1/manifest.yml", "/package/jumpcloud/1.17.1/validation.yml", "/package/jumpcloud/1.17.1/docs/README.md", "/package/jumpcloud/1.17.1/img/jumpcloud.svg", "/package/jumpcloud/1.17.1/img/sample-add-integration.png", "/package/jumpcloud/1.17.1/img/sample-screenshot.png", "/package/jumpcloud/1.17.1/kibana/tags.yml", "/package/jumpcloud/1.17.1/data_stream/events/manifest.yml", "/package/jumpcloud/1.17.1/data_stream/events/sample_event.json", "/package/jumpcloud/1.17.1/kibana/dashboard/jumpcloud-fe780080-94a7-11ed-9170-e9f90db17dfc.json", "/package/jumpcloud/1.17.1/kibana/tag/jumpcloud-fleet-managed-default.json", "/package/jumpcloud/1.17.1/kibana/tag/jumpcloud-fleet-pkg-jumpcloud-default.json", "/package/jumpcloud/1.17.1/data_stream/events/fields/agent.yml", "/package/jumpcloud/1.17.1/data_stream/events/fields/base-fields.yml", "/package/jumpcloud/1.17.1/data_stream/events/fields/fields.yml", "/package/jumpcloud/1.17.1/data_stream/events/agent/stream/httpjson.yml.hbs", "/package/jumpcloud/1.17.1/data_stream/events/elasticsearch/ingest_pipeline/default.yml" ], "policy_templates": [ { "name": "jumpcloud", "title": "JumpCloud Events", "description": "Collect JumpCloud Directory as a Service Events", "inputs": [ { "type": "httpjson", "title": "Poll Directory Insights API for Events", "description": "Collects JumpCloud Directory Insights Events via API" } ], "multiple": true } ], "data_streams": [ { "type": "logs", "dataset": "jumpcloud.events", "title": "JumpCloud Directory as a Service Events", "release": "ga", "ingest_pipeline": "default", "streams": [ { "input": "httpjson", "vars": [ { "name": "url", "type": "text", "title": "URL of JumpCloud Directory Insights API endpoint", "description": "i.e. scheme://host:port/path", "multi": false, "required": true, "show_user": true, "default": "https://api.jumpcloud.com/insights/directory/v1/events" }, { "name": "enable_request_tracer", "type": "bool", "title": "Enable request tracing", "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-httpjson.html#_request_tracer_filename) for details.", "multi": false, "required": false, "show_user": false }, { "name": "api_key", "type": "password", "title": "JumpCloud Directory Insights API Key", "multi": false, "required": true, "show_user": true, "default": "API_KEY" }, { "name": "starting_point", "type": "text", "title": "Starting point for event collection relative to now", "multi": false, "required": true, "show_user": false, "default": "-360h" }, { "name": "source_lag_time", "type": "text", "title": "Source Lag Time", "description": "Buffer time to account for API event delays (e.g. 2m, 5m, 30s). Used to subtract from the current time when setting `end_time` in API requests, ensuring delayed events are included.", "multi": false, "required": true, "show_user": true, "default": "0s" }, { "name": "services", "type": "text", "title": "JumpCloud event type to collect (all|directory|radius|sso|systems|ldap|mdm)", "multi": true, "required": true, "show_user": false, "default": [ "all" ] }, { "name": "event_limit", "type": "text", "title": "Number of events to request per poll", "multi": false, "required": true, "show_user": false, "default": 10000 }, { "name": "ssl", "type": "yaml", "title": "SSL Configuration", "description": "SSL configuration options. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-ssl.html#ssl-common-config) for details.", "multi": false, "required": false, "show_user": false, "default": "#certificate_authorities:\n# - |\n# -----BEGIN CERTIFICATE-----\n# MIIDCjCCAfKgAwIBAgITJ706Mu2wJlKckpIvkWxEHvEyijANBgkqhkiG9w0BAQsF\n# ADAUMRIwEAYDVQQDDAlsb2NhbGhvc3QwIBcNMTkwNzIyMTkyOTA0WhgPMjExOTA2\n# MjgxOTI5MDRaMBQxEjAQBgNVBAMMCWxvY2FsaG9zdDCCASIwDQYJKoZIhvcNAQEB\n# BQADggEPADCCAQoCggEBANce58Y/JykI58iyOXpxGfw0/gMvF0hUQAcUrSMxEO6n\n# fZRA49b4OV4SwWmA3395uL2eB2NB8y8qdQ9muXUdPBWE4l9rMZ6gmfu90N5B5uEl\n# 94NcfBfYOKi1fJQ9i7WKhTjlRkMCgBkWPkUokvBZFRt8RtF7zI77BSEorHGQCk9t\n# /D7BS0GJyfVEhftbWcFEAG3VRcoMhF7kUzYwp+qESoriFRYLeDWv68ZOvG7eoWnP\n# PsvZStEVEimjvK5NSESEQa9xWyJOmlOKXhkdymtcUd/nXnx6UTCFgnkgzSdTWV41\n# CI6B6aJ9svCTI2QuoIq2HxX/ix7OvW1huVmcyHVxyUECAwEAAaNTMFEwHQYDVR0O\n# BBYEFPwN1OceFGm9v6ux8G+DZ3TUDYxqMB8GA1UdIwQYMBaAFPwN1OceFGm9v6ux\n# 8G+DZ3TUDYxqMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAG5D\n# 874A4YI7YUwOVsVAdbWtgp1d0zKcPRR+r2OdSbTAV5/gcS3jgBJ3i1BN34JuDVFw\n# 3DeJSYT3nxy2Y56lLnxDeF8CUTUtVQx3CuGkRg1ouGAHpO/6OqOhwLLorEmxi7tA\n# H2O8mtT0poX5AnOAhzVy7QW0D/k4WaoLyckM5hUa6RtvgvLxOwA0U+VGurCDoctu\n# 8F4QOgTAWyh8EZIwaKCliFRSynDpv3JTUwtfZkxo6K6nce1RhCWFAsMvDZL8Dgc0\n# yvgJ38BRsFOtkRuAGSf6ZUwTO8JJRRIFnpUzXflAnGivK9M13D5GEQMmIl6U9Pvk\n# sxSmbIUfc2SGJGCJD4I=\n# -----END CERTIFICATE-----\n" }, { "name": "interval", "type": "text", "title": "Interval", "description": "Duration between requests to the API. Supported units for this parameter are h/m/s.", "multi": false, "required": true, "show_user": false, "default": "5m" }, { "name": "tags", "type": "text", "title": "Tags", "multi": true, "required": true, "show_user": false, "default": [ "forwarded" ] }, { "name": "preserve_original_event", "type": "bool", "title": "Preserve original event", "description": "Preserves a raw copy of the original event, added to the field `event.original`", "multi": false, "required": true, "show_user": true, "default": false }, { "name": "preserve_duplicate_custom_fields", "type": "bool", "title": "Preserve all parsed jumpcloud fields", "description": "Preserves all jumpcloud fields originally parsed from the jumpcloud event", "multi": false, "required": true, "show_user": false, "default": false }, { "name": "processors", "type": "yaml", "title": "Processors", "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.", "multi": false, "required": false, "show_user": false } ], "template_path": "httpjson.yml.hbs", "title": "JumpCloud Directory Insights API", "description": "Collect JumpCloud Events via JumpCloud Directory Insights API", "enabled": true, "ingestion_method": "API" } ], "package": "jumpcloud", "path": "events" } ] }