{
  "name": "prisma_access",
  "title": "Palo Alto Prisma Access",
  "version": "1.7.3",
  "release": "ga",
  "description": "Collect logs from Palo Alto Prisma Access with Elastic Agent.",
  "type": "integration",
  "download": "/epr/prisma_access/prisma_access-1.7.3.zip",
  "path": "/package/prisma_access/1.7.3",
  "icons": [
    {
      "src": "/img/prisma-access-logo.svg",
      "path": "/package/prisma_access/1.7.3/img/prisma-access-logo.svg",
      "title": "Palo Alto Prisma Access logo",
      "size": "32x32",
      "type": "image/svg+xml"
    }
  ],
  "conditions": {
    "kibana": {
      "version": "^8.16.0 || ^9.0.0"
    },
    "elastic": {
      "subscription": "basic"
    }
  },
  "owner": {
    "type": "elastic",
    "github": "elastic/integration-experience"
  },
  "categories": [
    "security",
    "network"
  ],
  "signature_path": "/epr/prisma_access/prisma_access-1.7.3.zip.sig",
  "format_version": "3.1.4",
  "readme": "/package/prisma_access/1.7.3/docs/README.md",
  "license": "basic",
  "screenshots": [
    {
      "src": "/img/prisma-access-authentication-dashboard.png",
      "path": "/package/prisma_access/1.7.3/img/prisma-access-authentication-dashboard.png",
      "title": "Prisma Access Authentication Dashboard",
      "size": "600x600",
      "type": "image/png"
    },
    {
      "src": "/img/prisma-access-decryption-dashboard.png",
      "path": "/package/prisma_access/1.7.3/img/prisma-access-decryption-dashboard.png",
      "title": "Prisma Access Decryption Dashboard",
      "size": "600x600",
      "type": "image/png"
    },
    {
      "src": "/img/prisma-access-dns-security-dashboard.png",
      "path": "/package/prisma_access/1.7.3/img/prisma-access-dns-security-dashboard.png",
      "title": "Prisma Access DNS Security Dashboard",
      "size": "600x600",
      "type": "image/png"
    },
    {
      "src": "/img/prisma-access-file-url-dashboard.png",
      "path": "/package/prisma_access/1.7.3/img/prisma-access-file-url-dashboard.png",
      "title": "Prisma Access File and URL Dashboard",
      "size": "600x600",
      "type": "image/png"
    },
    {
      "src": "/img/prisma-access-hip-match-global-protect-dashboard.png",
      "path": "/package/prisma_access/1.7.3/img/prisma-access-hip-match-global-protect-dashboard.png",
      "title": "Prisma Access HIPMatch and GlobalProtect Dashboard",
      "size": "600x600",
      "type": "image/png"
    },
    {
      "src": "/img/prisma-access-sctp-tunnel-dashboard.png",
      "path": "/package/prisma_access/1.7.3/img/prisma-access-sctp-tunnel-dashboard.png",
      "title": "Prisma Access SCTP and Tunnel Dashboard",
      "size": "600x600",
      "type": "image/png"
    },
    {
      "src": "/img/prisma-access-system-configuration-dashboard.png",
      "path": "/package/prisma_access/1.7.3/img/prisma-access-system-configuration-dashboard.png",
      "title": "Prisma Access System and Configuration Dashboard",
      "size": "600x600",
      "type": "image/png"
    },
    {
      "src": "/img/prisma-access-threat-dashboard.png",
      "path": "/package/prisma_access/1.7.3/img/prisma-access-threat-dashboard.png",
      "title": "Prisma Access Threat Dashboard",
      "size": "600x600",
      "type": "image/png"
    },
    {
      "src": "/img/prisma-access-traffic-dashboard.png",
      "path": "/package/prisma_access/1.7.3/img/prisma-access-traffic-dashboard.png",
      "title": "Prisma Access Traffic Dashboard",
      "size": "600x600",
      "type": "image/png"
    },
    {
      "src": "/img/prisma-access-userid-iptag-dashboard.png",
      "path": "/package/prisma_access/1.7.3/img/prisma-access-userid-iptag-dashboard.png",
      "title": "Prisma Access UserID and IPtag Dashboard",
      "size": "600x600",
      "type": "image/png"
    }
  ],
  "assets": [
    "/package/prisma_access/1.7.3/LICENSE.txt",
    "/package/prisma_access/1.7.3/changelog.yml",
    "/package/prisma_access/1.7.3/manifest.yml",
    "/package/prisma_access/1.7.3/validation.yml",
    "/package/prisma_access/1.7.3/docs/README.md",
    "/package/prisma_access/1.7.3/img/prisma-access-authentication-dashboard.png",
    "/package/prisma_access/1.7.3/img/prisma-access-decryption-dashboard.png",
    "/package/prisma_access/1.7.3/img/prisma-access-dns-security-dashboard.png",
    "/package/prisma_access/1.7.3/img/prisma-access-file-url-dashboard.png",
    "/package/prisma_access/1.7.3/img/prisma-access-hip-match-global-protect-dashboard.png",
    "/package/prisma_access/1.7.3/img/prisma-access-logo.svg",
    "/package/prisma_access/1.7.3/img/prisma-access-sctp-tunnel-dashboard.png",
    "/package/prisma_access/1.7.3/img/prisma-access-system-configuration-dashboard.png",
    "/package/prisma_access/1.7.3/img/prisma-access-threat-dashboard.png",
    "/package/prisma_access/1.7.3/img/prisma-access-traffic-dashboard.png",
    "/package/prisma_access/1.7.3/img/prisma-access-userid-iptag-dashboard.png",
    "/package/prisma_access/1.7.3/kibana/tags.yml",
    "/package/prisma_access/1.7.3/data_stream/event/manifest.yml",
    "/package/prisma_access/1.7.3/data_stream/event/sample_event.json",
    "/package/prisma_access/1.7.3/kibana/dashboard/prisma_access-29e20c1b-56d7-4faf-874a-ec0be2b71d73.json",
    "/package/prisma_access/1.7.3/kibana/dashboard/prisma_access-3ee4a5d1-f482-477d-a9d7-79614e47edf6.json",
    "/package/prisma_access/1.7.3/kibana/dashboard/prisma_access-4748fc8c-61fa-4734-96c4-00434060bb91.json",
    "/package/prisma_access/1.7.3/kibana/dashboard/prisma_access-5491eea8-ffea-4c38-853e-ecc71a029f5e.json",
    "/package/prisma_access/1.7.3/kibana/dashboard/prisma_access-59f8f009-9181-4648-8d2f-0efcef9af09c.json",
    "/package/prisma_access/1.7.3/kibana/dashboard/prisma_access-8c044964-3350-4ef9-8af0-b35842382ecb.json",
    "/package/prisma_access/1.7.3/kibana/dashboard/prisma_access-954911aa-fa52-4288-9eda-b5ffd6e4b742.json",
    "/package/prisma_access/1.7.3/kibana/dashboard/prisma_access-98ffa22c-9cce-4c8f-b827-045466894b3b.json",
    "/package/prisma_access/1.7.3/kibana/dashboard/prisma_access-9f7ebe0c-3608-4f80-bb30-14bf9da2add9.json",
    "/package/prisma_access/1.7.3/kibana/dashboard/prisma_access-c44e75d2-4d32-4944-877a-d4770b8bf003.json",
    "/package/prisma_access/1.7.3/kibana/search/prisma_access-240405f8-755f-4ffe-a0db-f20ae7911512.json",
    "/package/prisma_access/1.7.3/kibana/search/prisma_access-29ea49d5-83c3-4b2f-9f28-c0b889e4bffb.json",
    "/package/prisma_access/1.7.3/kibana/search/prisma_access-5841ba7f-45a0-4fbc-957c-cfa29a081651.json",
    "/package/prisma_access/1.7.3/kibana/search/prisma_access-7d0c9533-3fd4-46e2-a3d6-45481564f3ae.json",
    "/package/prisma_access/1.7.3/kibana/search/prisma_access-8e560bd6-5d0f-49bc-a238-08935d920c68.json",
    "/package/prisma_access/1.7.3/kibana/search/prisma_access-901e28ad-c0f4-4d01-bcce-5179545e8f15.json",
    "/package/prisma_access/1.7.3/kibana/search/prisma_access-9ccf2035-7285-4d43-a532-4414378efee1.json",
    "/package/prisma_access/1.7.3/kibana/search/prisma_access-a382a121-6dc3-4500-a096-2cb36d230006.json",
    "/package/prisma_access/1.7.3/kibana/search/prisma_access-e3d06be6-c0ee-42d1-8c6c-779d0ff8085d.json",
    "/package/prisma_access/1.7.3/kibana/search/prisma_access-eff7a8a7-4217-474e-b5ea-b6173e8ed2f5.json",
    "/package/prisma_access/1.7.3/data_stream/event/fields/base-fields.yml",
    "/package/prisma_access/1.7.3/data_stream/event/fields/beats.yml",
    "/package/prisma_access/1.7.3/data_stream/event/fields/fields.yml",
    "/package/prisma_access/1.7.3/data_stream/event/agent/stream/tcp.yml.hbs",
    "/package/prisma_access/1.7.3/data_stream/event/elasticsearch/ingest_pipeline/default.yml"
  ],
  "policy_templates": [
    {
      "name": "prisma_access",
      "title": "Palo Alto Prisma Access logs",
      "description": "Collect Palo Alto Prisma Access logs.",
      "inputs": [
        {
          "type": "tcp",
          "title": "Collect Palo Alto Prisma Access logs via TCP input",
          "description": "Collecting logs from Palo Alto Prisma Access via TCP input."
        }
      ],
      "multiple": true
    }
  ],
  "data_streams": [
    {
      "type": "logs",
      "dataset": "prisma_access.event",
      "title": "Collect Events from Palo Alto Prisma Access",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "tcp",
          "vars": [
            {
              "name": "listen_address",
              "type": "text",
              "title": "Listen Address",
              "description": "The bind address to listen for TCP connections. Set to `0.0.0.0` to bind to all available interfaces.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "localhost"
            },
            {
              "name": "listen_port",
              "type": "integer",
              "title": "Listen Port",
              "description": "The TCP port number to listen on.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": 9529
            },
            {
              "name": "tcp_options",
              "type": "yaml",
              "title": "Custom TCP Options",
              "description": "Specify custom configuration options for the TCP input.",
              "multi": false,
              "required": false,
              "show_user": false,
              "default": "#max_message_size: 50KiB\n#max_connections: 1\n"
            },
            {
              "name": "ssl",
              "type": "yaml",
              "title": "SSL Configuration",
              "description": "SSL configuration options. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-ssl.html#ssl-common-config) for details.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "#certificate: |\n#    -----BEGIN CERTIFICATE-----\n#    ...\n#    -----END CERTIFICATE-----\n#key: |\n#    -----BEGIN PRIVATE KEY-----\n#    ...\n#    -----END PRIVATE KEY-----\n"
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": true,
              "show_user": false,
              "default": [
                "forwarded",
                "prisma_access-event"
              ]
            },
            {
              "name": "preserve_original_event",
              "type": "bool",
              "title": "Preserve original event",
              "description": "Preserves a raw copy of the original event, added to the field `event.original`.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": false
            },
            {
              "name": "preserve_duplicate_custom_fields",
              "type": "bool",
              "title": "Preserve duplicate custom fields",
              "description": "Preserve prisma_access.event fields that were copied to Elastic Common Schema (ECS) fields.",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": false
            },
            {
              "name": "processors",
              "type": "yaml",
              "title": "Processors",
              "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "tcp.yml.hbs",
          "title": "Palo Alto Prisma Access Events",
          "description": "Collect Palo Alto Prisma Access events via TCP input.",
          "enabled": false,
          "ingestion_method": "Network Protocol"
        }
      ],
      "package": "prisma_access",
      "path": "event"
    }
  ]
}