From 1ade27b2ae873c437c70430ff930ab978ba4dbec Mon Sep 17 00:00:00 2001 From: parth-sumo Date: Fri, 10 Jan 2025 14:09:29 +0530 Subject: [PATCH] CONN-4040: Updated Dragos C2C doc with new endpoint --- .../dragos-source.md | 20 ++++++++++--------- .../index.md | 2 +- static/files/c2c/dragos/example.json | 3 ++- static/files/c2c/dragos/example.tf | 3 ++- 4 files changed, 16 insertions(+), 12 deletions(-) diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/dragos-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/dragos-source.md index 6e30b15d6c..b8d79b7a7b 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/dragos-source.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/dragos-source.md @@ -4,7 +4,7 @@ title: Dragos Source sidebar_label: Dragos tags: - Dragos -description: Collect address, asset, vulnerability, and zone details from the Dragos API and send them to Sumo Logic. +description: Collect address, asset, vulnerability, notification, and zone details from the Dragos API and send them to Sumo Logic. --- import CodeBlock from '@theme/CodeBlock'; import ExampleJSON from '/files/c2c/dragos/example.json'; @@ -17,13 +17,14 @@ import useBaseUrl from '@docusaurus/useBaseUrl'; Dragos is a cybersecurity platform with an ecosystem tailored for industrial environments, including Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA), Distributed Control System (DCS), and Operational Technology (OT) environments. Dragos's Operational Technology (OT) offers clear visibility into your Industrial Control System (ICS) assets and communications. It monitors networks, detects threats, and addresses vulnerabilities without causing disruptions or shutdowns, helping you respond confidently to potential threats. -The Dragos source collects address, asset, vulnerability, and zone details from the Dragos API and sends it to Sumo Logic for streamlined analysis. +The Dragos source collects address, asset, vulnerability, notification, and zone details from the Dragos API and sends it to Sumo Logic for streamlined analysis. ## Data collected | Polling Interval | Data | | :--- | :--- | -| 5 minutes | Vulnerability | +| 5 minutes | Vulnerabilities | +| 5 minutes | Notifications | | 24 hours | Addresses | | 24 hours | Zones | | 24 hours | Assets | @@ -89,15 +90,16 @@ Sources can be configured using UTF-8 encoded JSON files with the Collector Ma | requestEndpoint | String | Yes | `null` | The API URL to fetch the data from the Dragos log source. | `https://sumologic-dragos.cxc.dragos.cloud/` | | apiID | String | Yes | `null` | API ID of your account for authorization. | `036fxxxx-b642-xxxx-99d3-fcxxxx2exxxx` | | apiSecret | String | Yes | `null` | API Secret of your account for authorization. | `xxxU1TxxxxxxxxKSJwHYOpK37xxxxxxxxrEHAkU91xxxxxxxxxFrrJ06xxx` | -| pollingIntervalVulnerabilityMin | String | Yes | `5 minutes` | Time interval (in minutes) after which the source will check for new data for API.
**Default**: 5 minutess
**Minimum**: 5 minutes
**Maximum**: 60 minutes | | +| pollingIntervalVulnerabilityMin | String | Yes | `5 minutes` | Time interval (in minutes) after which the source will check for new data for API.
**Default**: 5 minutes
**Minimum**: 5 minutes
**Maximum**: 60 minutes | | | pollingIntervalAddressesHour | String | Yes | `24 hours` | Time interval (in hours) after which the source will check for new data for API.
**Default**: 24 hours
**Minimum**: 12 hours
**Maximum**: 24 hours | | | pollingIntervalZonesHour | String | Yes | `24 hours` | Time interval (in hours) after which the source will check for new data for API.
**Default**: 24 hours
**Minimum**: 12 hours
**Maximum**: 24 hours | | | pollingIntervalAssetsHour | String | Yes | `24 hours` | Time interval (in hours) after which the source will check for new data for API.
**Default**: 24 hours
**Minimum**: 12 hours
**Maximum**: 24 hours | | -| collectAddressDetails | Boolean | No | `True` | Specify if you need to collect the address details. | | -| collectZoneDetails | Boolean | No | `True` | Specify if you need to collect the zone details. | | -| collectDeviceDetails | Boolean | No | `True` | Specify if you need to collect the assets details. | | -| collectVulnerabilityDetails | Boolean | No | `True` | Specify if you need to collect the vulnerability details. | | - +| pollingIntervalNotificationMin | String | Yes | `5 minutes` | Time interval (in minutes) after which the source will check for new data for API.
**Default**: 5 minutes
**Minimum**: 5 minutes
**Maximum**: 60 minutes | | +| collectAddressDetails | Boolean | No | `False` | Specify if you need to collect the address details. | | +| collectZoneDetails | Boolean | No | `False` | Specify if you need to collect the zone details. | | +| collectDeviceDetails | Boolean | No | `False` | Specify if you need to collect the assets details. | | +| collectVulnerabilityDetails | Boolean | No | `False` | Specify if you need to collect the vulnerability details. | | +| collectNotificationDetails | Boolean | No | `False` | Specify if you need to collect the notification details. | | ### JSON example {MyComponentSource} diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md index 08dcd2cb78..5fe525a54e 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md @@ -252,7 +252,7 @@ In this section, we'll introduce the following concepts:
Thumbnail icon

Dragos

 -

Learn how to collect address, asset, vulnerability, and zone details from the Dragos API and send them to Sumo Logic.

+

Learn how to collect address, asset, vulnerability, notification, and zone details from the Dragos API and send them to Sumo Logic.

diff --git a/static/files/c2c/dragos/example.json b/static/files/c2c/dragos/example.json index adb537c863..01cfb24233 100644 --- a/static/files/c2c/dragos/example.json +++ b/static/files/c2c/dragos/example.json @@ -8,9 +8,10 @@ "apiSecret": "xxxU1TxxxxxxxxKSJwHYOpK37xxxxxxxxrEHAkU91xxxxxxxxxFrrJ06xxx", "collectVulnerability": true, "collectAddress": true, + "collectNotification": false, "collectZone": false, "collectAsset": false, - "pollingIntervalVulnerabilityMin": "24h", + "pollingIntervalVulnerabilityMin": "60m", "pollingIntervalAddressesHour": "5h" }, "schemaRef": { diff --git a/static/files/c2c/dragos/example.tf b/static/files/c2c/dragos/example.tf index d36e69db6f..3e3ffbda23 100644 --- a/static/files/c2c/dragos/example.tf +++ b/static/files/c2c/dragos/example.tf @@ -10,9 +10,10 @@ resource "sumologic_cloud_to_cloud_source" "dragos-source" { "apiSecret": "xxxU1TxxxxxxxxKSJwHYOpK37xxxxxxxxrEHAkU91xxxxxxxxxFrrJ06xxx", "collectVulnerability": true, "collectAddress": true, + "collectNotification": false, "collectZone": false, "collectAsset": false, - "pollingIntervalVulnerabilityMin": "24h", + "pollingIntervalVulnerabilityMin": "60m", "pollingIntervalAddressesHour": "5h" }) }