Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Addition of new CCP data connector GCP VPC flow logs #11829

Open
wants to merge 5 commits into
base: master
Choose a base branch
from

Conversation

manishkumar1991
Copy link
Contributor

Required items, please complete

Change(s):

  • New Data Connector Addition for GCP VPC flow logs

Reason for Change(s):

  • New Data Connector Addition for GCP VPC flow logs

Version Updated:

  • Yes

Testing Completed:

  • Yes

Checked that the validations are passing and have addressed any issues that are present:

  • Yes

@manishkumar1991 manishkumar1991 requested review from a team as code owners February 18, 2025 09:50
@v-prasadboke v-prasadboke self-assigned this Feb 18, 2025
@v-prasadboke v-prasadboke added the Connector Connector specialty review needed label Feb 18, 2025
Copy link
Contributor

@rahul0216 rahul0216 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please see the inline comments.

@@ -0,0 +1,36 @@
# GCP VPC flow logs Data Connector Configuration Guide
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Keep the F and L capital in 'flow logs'

### List of Resources required

* Topic
* Subscription for the topic,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Extra comma at the end

]
}

output "An_output_message"{
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Instead of generic "An_output_message" can we use something like 'Instruction' or 'Next_Step'?

{
"publisherId": "azuresentinel",
"offerId": "azure-sentinel-solution-gcpvpcflowlogs-api",
"firstPublishDate": "2024-11-11",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this date correct?

@@ -0,0 +1,104 @@
{
"name": "GCPVPCFlowLogsCCPDefinition",
"apiVersion": "2022-09-01-preview",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you once check if a stable api version is available?

[
{
"name": "GCPFlowDCR",
"apiVersion": "2021-09-01-preview",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can we verify if any stable version of API is available?

{ "name": "location", "type": "string" },
{ "name": "project_id", "type": "string" },
{ "name": "subnetwork_id", "type": "string" },
{ "name": "subnetwork_name", "type": "string" },
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  1. Can column name be in PascalCase as TimeGenerated is? Most of the table definition follows PascalCase style column name including existing GCP based functions.
  2. You need to check in dcr file also.

Copy link
Contributor

@rahul0216 rahul0216 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changes look good.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Connector Connector specialty review needed Content-Package
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants