-
Notifications
You must be signed in to change notification settings - Fork 3.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Addition of new CCP data connector GCP VPC flow logs #11829
base: master
Are you sure you want to change the base?
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please see the inline comments.
@@ -0,0 +1,36 @@ | |||
# GCP VPC flow logs Data Connector Configuration Guide |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Keep the F and L capital in 'flow logs'
### List of Resources required | ||
|
||
* Topic | ||
* Subscription for the topic, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Extra comma at the end
] | ||
} | ||
|
||
output "An_output_message"{ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Instead of generic "An_output_message" can we use something like 'Instruction' or 'Next_Step'?
{ | ||
"publisherId": "azuresentinel", | ||
"offerId": "azure-sentinel-solution-gcpvpcflowlogs-api", | ||
"firstPublishDate": "2024-11-11", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is this date correct?
@@ -0,0 +1,104 @@ | |||
{ | |||
"name": "GCPVPCFlowLogsCCPDefinition", | |||
"apiVersion": "2022-09-01-preview", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you once check if a stable api version is available?
[ | ||
{ | ||
"name": "GCPFlowDCR", | ||
"apiVersion": "2021-09-01-preview", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
can we verify if any stable version of API is available?
{ "name": "location", "type": "string" }, | ||
{ "name": "project_id", "type": "string" }, | ||
{ "name": "subnetwork_id", "type": "string" }, | ||
{ "name": "subnetwork_name", "type": "string" }, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
- Can column name be in PascalCase as TimeGenerated is? Most of the table definition follows PascalCase style column name including existing GCP based functions.
- You need to check in dcr file also.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Changes look good.
Required items, please complete
Change(s):
Reason for Change(s):
Version Updated:
Testing Completed:
Checked that the validations are passing and have addressed any issues that are present: