ConfluenceAudit ccp connector

.script/tests/KqlvalidationsTests/CustomTables/Confluence_Audit_CL.json

@@ -0,0 +1,125 @@
+{
+   "Name":"Confluence_Audit_CL",
+   "Properties":[
+      {
+         "Name":"EventVendor",
+         "Type":"String"
+      },
+      {
+         "Name":"EventProduct",
+         "Type":"String"
+      },
+      {
+         "Name":"TimeGenerated",
+         "Type":"DateTime"
+      },
+      {
+         "Name":"AuthorUsername",
+         "Type":"String"
+      },
+      {
+         "Name":"AuthorAccountId",
+         "Type":"String"
+      },
+      {
+         "Name":"UserIdentity",
+         "Type":"String"
+      },
+      {
+         "Name":"AuthorType",
+         "Type":"String"
+      },
+      {
+         "Name":"AuthorDisplayName",
+         "Type":"String"
+      },
+      {
+         "Name":"UserName",
+         "Type":"String"
+      },
+      {
+         "Name":"AuthorIsExternalCollaborator",
+         "Type":"Bool"
+      },
+      {
+         "Name":"AuthorUserKey",
+         "Type":"String"
+      },
+      {
+         "Name":"UserSid",
+         "Type":"String"
+      },
+      {
+         "Name":"AuthorAccountType",
+         "Type":"String"
+      },
+      {
+         "Name":"AuthorPublicName",
+         "Type":"String"
+      },
+      {
+         "Name":"AuthorExternalCollaborator",
+         "Type":"Bool"
+      },
+      {
+         "Name":"RemoteAddress",
+         "Type":"String"
+      },
+      {
+         "Name":"SrcIpAddr",
+         "Type":"String"
+      },
+      {
+         "Name":"CreationDate",
+         "Type":"Double"
+      },
+      {
+         "Name":"EventCreationTime",
+         "Type":"Double"
+      },
+      {
+         "Name":"Summary",
+         "Type":"String"
+      },
+      {
+         "Name":"EventMessage",
+         "Type":"String"
+      },
+      {
+         "Name":"Description",
+         "Type":"String"
+      },
+      {
+         "Name":"Category",
+         "Type":"String"
+      },
+      {
+         "Name":"EventCategoryType",
+         "Type":"String"
+      },
+      {
+         "Name":"SysAdmin",
+         "Type":"Bool"
+      },
+      {
+         "Name":"SuperAdmin",
+         "Type":"Bool"
+      },
+      {
+         "Name":"AffectedObjectName",
+         "Type":"String"
+      },
+      {
+         "Name":"AffectedObjectObjectType",
+         "Type":"String"
+      },
+      {
+         "Name":"ChangedValues",
+         "Type":"String"
+      },
+      {
+         "Name":"AssociatedObjects",
+         "Type":"String"
+      }
+   ]
+}

.script/tests/KqlvalidationsTests/CustomTables/Confluence_Audit_v2_CL.json

@@ -0,0 +1,81 @@
+{
+    "name": "Confluence_Audit_v2_CL",
+    "Properties": [
+        {
+            "name": "Author",
+            "type": "dynamic"
+        },
+        {
+            "name": "RemoteAddress",
+            "type": "string"
+        },
+        {
+            "name": "CreationDate",
+            "type": "long"
+        },
+        {
+            "name": "EventSummary",
+            "type": "string"
+        },
+        {
+            "name": "Description",
+            "type": "string"
+        },
+        {
+            "name": "EventCategory",
+            "type": "string"
+        },
+        {
+            "name": "SysAdmin",
+            "type": "boolean"
+        },
+        {
+            "name": "SuperAdmin",
+            "type": "boolean"
+        },
+        {
+            "name": "AffectedObject",
+            "type": "dynamic"
+        },
+        {
+            "name": "ChangedValues",
+            "type": "dynamic"
+        },
+        {
+            "name": "AssociatedObjects",
+            "type": "dynamic"
+        },
+        {
+            "name": "TimeGenerated",
+            "type": "datetime"
+        },
+        {
+            "name": "EventVendor",
+            "type": "string"
+        },
+        {
+            "name": "EventProduct",
+            "type": "string"
+        },
+        {
+            "name": "AuthorDisplayName",
+            "type": "string"
+        },
+        {
+            "name": "AuthorType",
+            "type": "string"
+        },
+        {
+            "name": "AuthorAccountId",
+            "type": "string"
+        },
+        {
+            "name": "AffectedObjectName",
+            "type": "string"
+        },
+        {
+            "name": "AffectedObjectType",
+            "type": "string"
+        }
+    ]
+}

Solutions/AtlassianConfluenceAudit/Data Connectors/ConfluenceAuditCCP_RestAPI_CCP/ConfluenceAudit_DCR.json

@@ -0,0 +1,83 @@
+{
+    "name": "AtlassianConfluenceDCR",
+    "apiVersion": "2021-09-01-preview",
+    "type": "Microsoft.Insights/dataCollectionRules",
+    "location": "{{location}}",
+    "kind": null,
+    "properties": {
+        "streamDeclarations": {
+            "Custom-Confluence_Audit_v2_CL": {
+                "columns": [
+                    {
+                        "name": "author",
+                        "type": "dynamic"
+                    },
+                    {
+                        "name": "remoteAddress",
+                        "type": "string"
+                    },
+                    {
+                        "name": "creationDate",
+                        "type": "long"
+                    },
+                    {
+                        "name": "summary",
+                        "type": "string"
+                    },
+                    {
+                        "name": "description",
+                        "type": "string"
+                    },
+                    {
+                        "name": "category",
+                        "type": "string"
+                    },
+                    {
+                        "name": "sysAdmin",
+                        "type": "boolean"
+                    },
+                    {
+                        "name": "superAdmin",
+                        "type": "boolean"
+                    },
+                    {
+                        "name": "affectedObject",
+                        "type": "dynamic"
+                    },
+                    {
+                        "name": "changedValues",
+                        "type": "dynamic"
+                    },
+                    {
+                        "name": "associatedObjects",
+                        "type": "dynamic"
+                    }
+                ]
+            }
+        },
+        "dataSources": {
+
+        },
+        "destinations": {
+            "logAnalytics": [
+                {
+                    "workspaceResourceId": "[variables('workspaceResourceId')]",
+                    "name": "clv2ws1"
+                }
+            ]
+        },
+        "dataFlows": [
+            {
+                "streams": [
+                    "Custom-Confluence_Audit_v2_CL"
+                ],
+                "destinations": [
+                    "clv2ws1"
+                ],
+                "transformKql": "source\n| extend   TimeGenerated = now(),   EventVendor=\"Atlassian\",   EventProduct=\"Confluence Audit\"\n|project-rename Author=author,\n   EventSummary=summary,\n   EventCategory=category,\n   AffectedObject=affectedObject,\n   ChangedValues=changedValues,\n   AssociatedObjects=associatedObjects,\n   RemoteAddress=remoteAddress,\n   CreationDate=creationDate,\n Description=description,\n   SysAdmin=sysAdmin,\n   SuperAdmin=superAdmin\n| extend AuthorDisplayName=tostring(Author.displayName),\n   AuthorType=tostring(Author.type),\n   AuthorAccountId=tostring(Author.accountId),\n  AffectedObjectName=tostring(AffectedObject.name),\n  AffectedObjectType=tostring(AffectedObject.type)         ",
+                "outputStream": "Custom-Confluence_Audit_v2_CL"
+            }
+        ],
+        "dataCollectionEndpointId": "[concat('/subscriptions/',parameters('subscription'),'/resourceGroups/',parameters('resourceGroupName'),'/providers/Microsoft.Insights/dataCollectionEndpoints/',parameters('workspace'))]"
+    }
+}