{
  "name": "proxysg",
  "title": "Broadcom ProxySG",
  "version": "0.8.1",
  "release": "beta",
  "source": {
    "license": "Elastic-2.0"
  },
  "description": "Collect access logs from Broadcom ProxySG with Elastic Agent.",
  "type": "integration",
  "download": "/epr/proxysg/proxysg-0.8.1.zip",
  "path": "/package/proxysg/0.8.1",
  "icons": [
    {
      "src": "/img/proxysg_logo.svg",
      "path": "/package/proxysg/0.8.1/img/proxysg_logo.svg",
      "title": "ProxySG logo",
      "type": "image/svg+xml"
    }
  ],
  "conditions": {
    "kibana": {
      "version": "^8.13.0 || ^9.0.0"
    },
    "elastic": {
      "subscription": "basic"
    }
  },
  "owner": {
    "type": "elastic",
    "github": "elastic/integration-experience"
  },
  "categories": [
    "network",
    "security"
  ],
  "signature_path": "/epr/proxysg/proxysg-0.8.1.zip.sig",
  "format_version": "3.1.1",
  "readme": "/package/proxysg/0.8.1/docs/README.md",
  "license": "basic",
  "screenshots": [
    {
      "src": "/img/screenshot-0.png",
      "path": "/package/proxysg/0.8.1/img/screenshot-0.png",
      "title": "ProxySG dashboard",
      "size": "2426×2212",
      "type": "image/png"
    }
  ],
  "assets": [
    "/package/proxysg/0.8.1/LICENSE.txt",
    "/package/proxysg/0.8.1/changelog.yml",
    "/package/proxysg/0.8.1/manifest.yml",
    "/package/proxysg/0.8.1/validation.yml",
    "/package/proxysg/0.8.1/docs/README.md",
    "/package/proxysg/0.8.1/img/proxysg_logo.svg",
    "/package/proxysg/0.8.1/img/screenshot-0.png",
    "/package/proxysg/0.8.1/data_stream/log/manifest.yml",
    "/package/proxysg/0.8.1/data_stream/log/sample_event.json",
    "/package/proxysg/0.8.1/docs/knowledge_base/service_info.md",
    "/package/proxysg/0.8.1/kibana/dashboard/proxysg-69b7c835-b9b4-4efa-b183-69468f4688c0.json",
    "/package/proxysg/0.8.1/data_stream/log/fields/agent.yml",
    "/package/proxysg/0.8.1/data_stream/log/fields/base-fields.yml",
    "/package/proxysg/0.8.1/data_stream/log/fields/fields.yml",
    "/package/proxysg/0.8.1/data_stream/log/agent/stream/stream.yml.hbs",
    "/package/proxysg/0.8.1/data_stream/log/agent/stream/tcp.yml.hbs",
    "/package/proxysg/0.8.1/data_stream/log/agent/stream/udp.yml.hbs",
    "/package/proxysg/0.8.1/data_stream/log/elasticsearch/ingest_pipeline/bcreportermain_v1.yml",
    "/package/proxysg/0.8.1/data_stream/log/elasticsearch/ingest_pipeline/bcreporterssl_v1.yml",
    "/package/proxysg/0.8.1/data_stream/log/elasticsearch/ingest_pipeline/default.yml",
    "/package/proxysg/0.8.1/data_stream/log/elasticsearch/ingest_pipeline/main.yml",
    "/package/proxysg/0.8.1/data_stream/log/elasticsearch/ingest_pipeline/ssl.yml"
  ],
  "policy_templates": [
    {
      "name": "proxysg-access-logs",
      "title": "ProxySG access logs",
      "description": "Collect access logs from ProxySG instances",
      "inputs": [
        {
          "type": "filestream",
          "title": "Collect access logs from ProxySG via logging server file",
          "description": "Collecting access logs from ProxySG via logging server file"
        },
        {
          "type": "udp",
          "title": "Collect logs from ProxySG via UDP",
          "description": "Collecting logs from ProxySG via UDP"
        },
        {
          "type": "tcp",
          "title": "Collect logs from ProxySG via TCP",
          "description": "Collecting logs from ProxySG via TCP"
        }
      ],
      "multiple": true
    }
  ],
  "data_streams": [
    {
      "type": "logs",
      "dataset": "proxysg.log",
      "title": "ProxySG Access Logs",
      "release": "beta",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "filestream",
          "vars": [
            {
              "name": "paths",
              "type": "text",
              "title": "Paths",
              "multi": true,
              "required": true,
              "show_user": true,
              "default": [
                "/var/log/proxysg-log.log"
              ]
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": true,
              "show_user": false,
              "default": [
                "proxysg-access-log",
                "forwarded"
              ]
            },
            {
              "name": "preserve_original_event",
              "type": "bool",
              "title": "Preserve original event",
              "description": "Preserves a raw copy of the original event, added to the field `event.original`",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": false
            },
            {
              "name": "config",
              "type": "select",
              "title": "Access Log Format",
              "description": "Log configuration type for input. For a description of the log formats see [here](https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/edge-swg/7-3/getting-started/page-help-administration/page-help-logging/log-formats/default-formats.html).\n",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "main"
            },
            {
              "name": "filestream_options",
              "type": "yaml",
              "title": "Custom Filestream Options",
              "description": "Specify custom configuration options for the Filestream input. See [filestream input](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-filestream.html) for details.",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "processors",
              "type": "yaml",
              "title": "Processors",
              "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "ProxySG Access logs",
          "description": "Collect ProxySG access logs from file",
          "enabled": false,
          "ingestion_method": "File"
        },
        {
          "input": "udp",
          "vars": [
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": true,
              "show_user": false,
              "default": [
                "forwarded"
              ]
            },
            {
              "name": "udp_host",
              "type": "text",
              "title": "Listen Address",
              "description": "The bind address to listen for UDP connections. Set to `0.0.0.0` to bind to all available interfaces.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "localhost"
            },
            {
              "name": "udp_port",
              "type": "integer",
              "title": "Listen Port",
              "description": "The UDP port number to listen on.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": 514
            },
            {
              "name": "preserve_original_event",
              "type": "bool",
              "title": "Preserve original event",
              "description": "Preserves a raw copy of the original event, added to the field `event.original`.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": false
            },
            {
              "name": "udp_options",
              "type": "yaml",
              "title": "Custom UDP Options",
              "description": "Specify custom configuration options for the UDP input.",
              "multi": false,
              "required": false,
              "show_user": false,
              "default": "#read_buffer: 100MiB\n#max_message_size: 50KiB\n#timeout: 300s\n"
            },
            {
              "name": "processors",
              "type": "yaml",
              "title": "Processors",
              "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.\n",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "config",
              "type": "select",
              "title": "Access Log Format",
              "description": "Log configuration type for input. For a description of the log formats see [here](https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/edge-swg/7-3/getting-started/page-help-administration/page-help-logging/log-formats/default-formats.html).\n",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "main"
            }
          ],
          "template_path": "udp.yml.hbs",
          "title": "ProxySG logs (via UDP)",
          "description": "Collect ProxySG logs (via UDP)",
          "enabled": false,
          "ingestion_method": "Network Protocol"
        },
        {
          "input": "tcp",
          "vars": [
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": true,
              "show_user": false,
              "default": [
                "forwarded"
              ]
            },
            {
              "name": "tcp_host",
              "type": "text",
              "title": "Listen Address",
              "description": "The bind address to listen for TCP connections. Set to `0.0.0.0` to bind to all available interfaces.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "localhost"
            },
            {
              "name": "tcp_port",
              "type": "integer",
              "title": "Listen Port",
              "description": "The TCP port number to listen on.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": 601
            },
            {
              "name": "preserve_original_event",
              "type": "bool",
              "title": "Preserve original event",
              "description": "Preserves a raw copy of the original event, added to the field `event.original`.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": false
            },
            {
              "name": "tcp_options",
              "type": "yaml",
              "title": "Custom TCP Options",
              "description": "Specify custom configuration options for the TCP input.",
              "multi": false,
              "required": false,
              "show_user": false,
              "default": ""
            },
            {
              "name": "ssl",
              "type": "yaml",
              "title": "SSL Configuration",
              "description": "SSL configuration options. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-ssl.html#ssl-common-config) for details.",
              "multi": false,
              "required": false,
              "show_user": false,
              "default": "#certificate: \"/etc/server/cert.pem\"\n#key: \"/etc/server/key.pem\"\n"
            },
            {
              "name": "processors",
              "type": "yaml",
              "title": "Processors",
              "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.\n",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "config",
              "type": "select",
              "title": "Access Log Format",
              "description": "Log configuration type for input. For a description of the log formats see [here](https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/edge-swg/7-3/getting-started/page-help-administration/page-help-logging/log-formats/default-formats.html).\n",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "main"
            }
          ],
          "template_path": "tcp.yml.hbs",
          "title": "ProxySG logs (via TCP)",
          "description": "Collect ProxySG logs (via TCP)",
          "enabled": true,
          "ingestion_method": "Network Protocol"
        }
      ],
      "package": "proxysg",
      "path": "log"
    }
  ]
}