Skip to content

Updated Infoblox NIOS parsers to exclude few categories#12930

Merged
v-atulyadav merged 5 commits into
masterfrom
v-sabiraj-updatinginfobloxparser
Dec 18, 2025
Merged

Updated Infoblox NIOS parsers to exclude few categories#12930
v-atulyadav merged 5 commits into
masterfrom
v-sabiraj-updatinginfobloxparser

Conversation

@v-sabiraj
Copy link
Copy Markdown
Contributor

Required items, please complete

Change(s):

  • See guidance below

Reason for Change(s):

  • See guidance below

Version Updated:

  • Required only for Detections/Analytic Rule templates
  • See guidance below

Testing Completed:

  • See guidance below

Checked that the validations are passing and have addressed any issues that are present:

  • See guidance below

Guidance <- remove section before submitting


Before submitting this PR please ensure that you have read the following sections and filled out the changes, reason for change and testing complete sections:

Thank you for your contribution to the Microsoft Sentinel Github repo.

Details of the code changes in your submitted PR. Providing descriptions for pull requests ensures there is context to changes being made and greatly enhances the code review process. Providing associated Issues that this resolves also easily connects the reason.

Change(s):

  • Updated syntax for XYZ.yaml

Reason for Change(s):

Version updated:

  • Yes
  • Detections/Analytic Rule templates are required to have the version updated

The code should have been tested in a Microsoft Sentinel environment that does not have any custom parsers, functions or tables, so that you validate no incorrect syntax and execution functions properly. If your submission requires a custom parser or function, it must be submitted with the PR.

Testing Completed:

  • Yes/No/Need Help

Note: If updating a detection, you must update the version field.

Before the submission has been made, please look at running the KQL and Yaml Validation Checks locally.
https://github.com/Azure/Azure-Sentinel#run-kql-validation-locally

Checked that the validations are passing and have addressed any issues that are present:

  • Yes/No/Need Help

Note: Let us know if you have tried fixing the validation error and need help.

References:


Expanded exclusion lists in Infoblox_allotherdhcpdTypes and Infoblox_dhcpother parsers to filter additional log types.
@v-sabiraj v-sabiraj requested review from a team as code owners October 7, 2025 09:55
@v-shukore v-shukore self-assigned this Oct 8, 2025
@v-shukore v-shukore added the Solution Solution specialty review needed label Oct 8, 2025
@v-sabiraj v-sabiraj requested a review from Copilot October 17, 2025 13:04
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Adds expanded exclusion filters to two Infoblox DHCP parser functions and increments solution and parser versions.

  • Updated exclusion lists in Infoblox_dhcpother and Infoblox_allotherdhcpdTypes to filter additional administrative and zone-related log types.
  • Bumped solution version from 3.0.4 to 3.0.5 and parser versions from 1.1.0 to 1.1.1 across packaging template.
  • Updated embedded parser queries and associated ARM template metadata (contentProductId/id) to reflect new versions.

Reviewed Changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated 4 comments.

File Description
Solutions/Infoblox NIOS/ReleaseNotes.md Added 3.0.5 entry documenting exclusion list expansion.
Solutions/Infoblox NIOS/Parsers/Infoblox_dhcpother.yaml Incremented version/date and extended has_any exclusion list.
Solutions/Infoblox NIOS/Parsers/Infoblox_allotherdhcpdTypes.yaml Incremented version/date and extended has_any exclusion list (still contains duplicate token).
Solutions/Infoblox NIOS/Package/mainTemplate.json Propagated version bumps, updated parser queries and content identifiers, removed a data connector reference.

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

Comment thread Solutions/Infoblox NIOS/Parsers/Infoblox_allotherdhcpdTypes.yaml Outdated
Comment thread Solutions/Infoblox NIOS/Package/mainTemplate.json Outdated
Comment thread Solutions/Infoblox NIOS/Package/mainTemplate.json Outdated
Comment thread Solutions/Infoblox NIOS/ReleaseNotes.md
@v-atulyadav v-atulyadav merged commit ab7a73c into master Dec 18, 2025
32 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Solution Solution specialty review needed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants