def main(): from requests.packages import urllib3 urllib3.disable_warnings() arguments = { 'aws_account': { 'title': 'The name of AWS account' }, 'aws_iam_role': { 'title': 'The name of IAM user would be assumed' }, 'sqs_queue_url': { 'title': 'The URL of queue' }, 'sqs_queue_region': { 'title': 'Which region the queue located in.' }, 'sqs_batch_size': { 'title': 'The max number of messages would be processing concurrently.' }, 's3_file_decoder': { 'title': 'Which decoder should be use to decode the content of file.' }, 'use_raw_hec': { 'title': 'The URL of RawHEC endpoint.' }, } SimpleCollectorV1.main( modular_input_run, title='AWS SQS-Based S3', use_single_instance=False, arguments=arguments, )
def main(): arguments = { 'placeholder': { 'title': 'A placeholder field for making scheme valid.' } } SimpleCollectorV1.main(GoogleCloudBilling(), title='Google Billing Report', log_file_sharding=True, arguments=arguments)
def main(): arguments = { 'aws_account': { 'title': 'The AWS account name.' }, 'aws_iam_role': { 'title': 'Assume Role.', 'required_on_create': False }, 'log_type': { 'title': 'What is kind of log.' }, 'bucket_name': { 'title': 'Where are the logs located.' }, 'bucket_region': { 'title': 'Where is the bucket located.' }, 'host_name': { 'title': 'Host the bucket located. Used to detect bucket_region.' }, 'log_file_prefix': { 'title': 'Please read document for details.' }, 'log_start_date': { 'title': 'The logs earlier than this date would not be ingested.' }, 'log_name_format': { 'title': 'Please Read document for details.' }, 'max_retries': { 'title': 'Max Retries', 'required_on_create': False }, 'max_fails': { 'title': 'Max Fails', 'required_on_create': False }, 'max_number_of_process': { 'title': 'How many worker processes could be running in parallel for each input', 'required_on_create': False }, 'max_number_of_thread': { 'title': 'How many worker threads could be running in parallel for each process', 'required_on_create': False } } SimpleCollectorV1.main( modular_input_main, title='AWS S3 Incremental Logs', use_single_instance=False, arguments=arguments, log_file_sharding=True, )
def main(): arguments = { 'tenant_name': { 'title': 'Tenant Name', 'description': 'Which Office 365 tenant will be used.' }, } SimpleCollectorV1.main( modular_input_run, title='Splunk Add-on for Microsoft Office 365 Service Message', description= 'Ingest service messages from Office 365 Service Communications API', use_single_instance=False, arguments=arguments, )
def main(): arguments = { 'google_credentials_name': { 'title': 'The name of Google service account' }, 'google_project': { 'title': 'The Google project ID' }, 'google_subscriptions': { 'title': "List of subscriptions' names" } } SimpleCollectorV1.main( modular_input_run, title='Google Pub/Sub Subscription', use_single_instance=False, arguments=arguments, )
def main(): arguments = { 'tenant_name': { 'title': 'Tenant Name', 'description': 'Which Office 365 tenant will be used.' }, 'content_type': { 'title': 'Content Type', 'description': 'What kind of status will be ingested.' } } SimpleCollectorV1.main( modular_input_run, title='Splunk Add-on for Microsoft Office 365 Service Status', description= 'Ingest service statuses from Office 365 Service Communications API', use_single_instance=False, arguments=arguments, )
def main(): arguments = { 'tenant_name': { 'title': 'Tenant Name', 'description': 'Which Office 365 tenant will be used.' }, 'content_type': { 'title': 'Content Type', 'description': 'What kind of Management Activity will be ingested.' }, 'number_of_threads': { 'title': 'Number of Threads', 'description': 'The number of threads used to download content blob in parallel.', 'required_on_edit': False, 'required_on_create': False }, 'token_refresh_window': { 'title': 'Token Refresh Window', 'description': "The number of seconds before the token's expiration time when the token should be refreshed.", 'required_on_edit': False, 'required_on_create': False }, 'request_timeout': { 'title': 'Request Timeout', 'description': "The number of seconds to wait before timeout while getting response from the subscription api.", 'required_on_edit': False, 'required_on_create': False } } SimpleCollectorV1.main( modular_input_run, title='Splunk Add-on for Microsoft Office 365 Management Activity', description='Ingest audit events from Office 365 Management Activity API', use_single_instance=False, arguments=arguments, )
def main(): from requests.packages import urllib3 urllib3.disable_warnings() arguments = { 'aws_account': { 'title': 'The name of AWS account.' }, 'aws_iam_role': { 'title': 'The name of IAM user would be assumed.' }, 'bucket_name': { 'title': 'What is the name of bucket.' }, 'bucket_region': { 'title': 'Where is the bucket located.' }, 'report_names': { 'title': 'A regex pattern for selecting reports.' }, 'report_prefix': { 'title': 'The report prefix.' }, 'start_date': { 'title': 'Monitoring reports later than the date.' }, 'temp_folder': { 'title': 'An alternative temp folder path.' }, } SimpleCollectorV1.main( modular_input_run, title='AWS Billing (Cost And Usage Report)', use_single_instance=False, arguments=arguments, )
def main(): SimpleCollectorV1.main( Input(), description='Collect and index AWS SQS messages', arguments={'placeholder': {}}, )