{
  "name": "microsoft_dhcp",
  "title": "Microsoft DHCP",
  "version": "1.26.0",
  "release": "ga",
  "description": "Collect logs from Microsoft DHCP with Elastic Agent.",
  "type": "integration",
  "download": "/epr/microsoft_dhcp/microsoft_dhcp-1.26.0.zip",
  "path": "/package/microsoft_dhcp/1.26.0",
  "icons": [
    {
      "src": "/img/logo.svg",
      "path": "/package/microsoft_dhcp/1.26.0/img/logo.svg",
      "title": "Microsoft logo",
      "size": "32x32",
      "type": "image/svg+xml"
    }
  ],
  "conditions": {
    "kibana": {
      "version": "^7.14.0 || ^8.0.0 || ^9.0.0"
    }
  },
  "owner": {
    "type": "elastic",
    "github": "elastic/sec-windows-platform"
  },
  "categories": [
    "security"
  ],
  "signature_path": "/epr/microsoft_dhcp/microsoft_dhcp-1.26.0.zip.sig",
  "format_version": "3.0.0",
  "readme": "/package/microsoft_dhcp/1.26.0/docs/README.md",
  "license": "basic",
  "assets": [
    "/package/microsoft_dhcp/1.26.0/LICENSE.txt",
    "/package/microsoft_dhcp/1.26.0/changelog.yml",
    "/package/microsoft_dhcp/1.26.0/manifest.yml",
    "/package/microsoft_dhcp/1.26.0/validation.yml",
    "/package/microsoft_dhcp/1.26.0/docs/README.md",
    "/package/microsoft_dhcp/1.26.0/img/logo.svg",
    "/package/microsoft_dhcp/1.26.0/kibana/tags.yml",
    "/package/microsoft_dhcp/1.26.0/data_stream/log/manifest.yml",
    "/package/microsoft_dhcp/1.26.0/data_stream/log/sample_event.json",
    "/package/microsoft_dhcp/1.26.0/data_stream/log/fields/agent.yml",
    "/package/microsoft_dhcp/1.26.0/data_stream/log/fields/base-fields.yml",
    "/package/microsoft_dhcp/1.26.0/data_stream/log/fields/ecs.yml",
    "/package/microsoft_dhcp/1.26.0/data_stream/log/fields/fields.yml",
    "/package/microsoft_dhcp/1.26.0/data_stream/log/agent/stream/logfile.yml.hbs",
    "/package/microsoft_dhcp/1.26.0/data_stream/log/elasticsearch/ingest_pipeline/default.yml",
    "/package/microsoft_dhcp/1.26.0/data_stream/log/elasticsearch/ingest_pipeline/dhcp.yml",
    "/package/microsoft_dhcp/1.26.0/data_stream/log/elasticsearch/ingest_pipeline/dhcpv6.yml"
  ],
  "policy_templates": [
    {
      "name": "microsoft_dhcp",
      "title": "Microsoft DHCP",
      "description": "Collect Microsoft DHCP logs.",
      "inputs": [
        {
          "type": "logfile",
          "title": "Logs from file",
          "description": "Collect DHCP logs from file."
        }
      ],
      "multiple": true
    }
  ],
  "data_streams": [
    {
      "type": "logs",
      "dataset": "microsoft_dhcp.log",
      "title": "Microsoft DHCP Logs",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "logfile",
          "vars": [
            {
              "name": "tz_offset",
              "type": "text",
              "title": "Timezone Offset",
              "description": "By default, datetimes in the logs will be interpreted as relative to the timezone configured in the host where the agent is running. If ingesting logs from a host on a different timezone, use this field to set the timezone offset so that datetimes are correctly parsed. Acceptable timezone formats are: a canonical ID (e.g. \"Europe/Amsterdam\"), abbreviated (e.g. \"EST\") or an HH:mm differential (e.g. \"-05:00\") from UCT.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "local"
            },
            {
              "name": "paths",
              "type": "text",
              "title": "Paths",
              "multi": true,
              "required": false,
              "show_user": true,
              "default": [
                "C:\\Windows\\System32\\DHCP\\DhcpSrvLog-*.log"
              ]
            },
            {
              "name": "preserve_original_event",
              "type": "bool",
              "title": "Preserve original event",
              "description": "Preserves a raw copy of the original event, added to the field `event.original`.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": false
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": true,
              "show_user": false,
              "default": [
                "forwarded",
                "microsoft_dhcp"
              ]
            },
            {
              "name": "processors",
              "type": "yaml",
              "title": "Processors",
              "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata.  This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.\n",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "logfile.yml.hbs",
          "title": "DHCP Logs",
          "description": "Collects Microsoft DHCP logs.",
          "enabled": true,
          "ingestion_method": "File"
        }
      ],
      "package": "microsoft_dhcp",
      "path": "log"
    }
  ]
}