File tree Expand file tree Collapse file tree 4 files changed +11
-11
lines changed
Expand file tree Collapse file tree 4 files changed +11
-11
lines changed Original file line number Diff line number Diff line change 1212 "BasePath" : " C:\\ GitHub\\ Azure-Sentinel\\ Solutions\\ Blacklens" ,
1313 "Version" : " 3.0.1" ,
1414 "Metadata" : " SolutionMetadata.json" ,
15- "TemplateSpec" : true ,
15+ "TemplateSpec" : false ,
1616 "Is1PConnector" : false
1717}
Original file line number Diff line number Diff line change 371371 "status" : " Available" ,
372372 "requiredDataConnectors" : [
373373 {
374+ "connectorId" : " blacklens_io" ,
374375 "dataTypes" : [
375376 " blacklens_CL"
376- ],
377- "connectorId" : " blacklens_io"
377+ ]
378378 }
379379 ],
380380 "tactics" : [
401401 {
402402 "fieldMappings" : [
403403 {
404- "columnName " : " link " ,
405- "identifier " : " Url "
404+ "identifier " : " Url " ,
405+ "columnName " : " link "
406406 }
407407 ],
408408 "entityType" : " URL"
412412 "aggregationKind" : " AlertPerResult"
413413 },
414414 "alertDetailsOverride" : {
415+ "alertSeverityColumnName" : " AlertSeverity" ,
415416 "alertDescriptionFormat" : " {{message}}" ,
416- "alertDisplayNameFormat" : " {{alert_title}}" ,
417- "alertSeverityColumnName" : " AlertSeverity"
417+ "alertDisplayNameFormat" : " {{alert_title}}"
418418 },
419419 "incidentConfiguration" : {
420+ "createIncident" : true ,
420421 "groupingConfiguration" : {
421422 "lookbackDuration" : " PT5H" ,
422- "enabled " : false ,
423+ "reopenClosedIncident " : false ,
423424 "matchingMethod" : " AllEntities" ,
424- "reopenClosedIncident" : false
425- },
426- "createIncident" : true
425+ "enabled" : false
426+ }
427427 }
428428 }
429429 },
You can’t perform that action at this time.
0 commit comments