|
1 | 1 | { |
2 | 2 | "name": "CiscoUmbrellaConnector", |
3 | | - "apiVersion": "2022-09-01-preview", |
| 3 | + "apiVersion": "2025-09-01", |
4 | 4 | "type": "Microsoft.SecurityInsights/dataConnectorDefinitions", |
5 | 5 | "location": "{{location}}", |
6 | 6 | "kind": "Customizable", |
7 | 7 | "properties": { |
8 | 8 | "connectorUiConfig": { |
9 | 9 | "id": "CiscoUmbrellaConnector", |
10 | 10 | "title": "Cisco Umbrella (via Codeless Connector Framework)", |
11 | | - "publisher": "Cisco", |
| 11 | + "publisher": "Microsoft", |
12 | 12 | "descriptionMarkdown": "The Cisco Cloud Security solution for Microsoft Sentinel enables you to ingest [Cisco Secure Access](https://securitydocs.cisco.com/secure-access-sub-landing-page) and [Cisco Umbrella](https://securitydocs.cisco.com/umbrella-sub-landing-page) logs stored in Cisco-managed Amazon S3 Bucket into Microsoft Sentinel using the Amazon S3 REST API. Refer to [Cisco Cloud Security log management documentation](https://securitydocs.cisco.com/docs/csa/olh/118897.dita) for more information.", |
13 | 13 | "graphQueriesTableName": "CiscoUmbrellaAdminAudit_CL", |
14 | 14 | "graphQueries": [ |
15 | 15 | { |
16 | 16 | "metricName": "Total Admin Audit Logs received", |
17 | 17 | "legend": "Cisco Admin Audit Logs", |
18 | | - "baseQuery": "{{graphQueriesTableName}}" |
| 18 | + "baseQuery": "CiscoUmbrellaAdminAudit_CL" |
19 | 19 | }, |
20 | 20 | { |
21 | 21 | "metricName": "Total Cloud Firewall Logs received", |
|
66 | 66 | "sampleQueries": [ |
67 | 67 | { |
68 | 68 | "description": "Get sample of Cisco Admin Audit Logs", |
69 | | - "query": "{{graphQueriesTableName}} | take 10" |
| 69 | + "query": "CiscoUmbrellaAdminAudit_CL | take 10" |
70 | 70 | }, |
71 | 71 | { |
72 | 72 | "description": "Get sample of Cisco Cloud Firewall Logs", |
|
107 | 107 | ], |
108 | 108 | "dataTypes": [ |
109 | 109 | { |
110 | | - "name": "{{graphQueriesTableName}}", |
111 | | - "lastDataReceivedQuery": "{{graphQueriesTableName}}\n | where TimeGenerated > ago(12h) | summarize Time = max(TimeGenerated)\n | where isnotempty(Time)" |
| 110 | + "name": "CiscoUmbrellaAdminAudit_CL", |
| 111 | + "lastDataReceivedQuery": "CiscoUmbrellaAdminAudit_CL\n | where TimeGenerated > ago(12h) | summarize Time = max(TimeGenerated)\n | where isnotempty(Time)" |
112 | 112 | }, |
113 | 113 | { |
114 | 114 | "name": "CiscoUmbrellaCloudFirewall_CL", |
|
153 | 153 | } |
154 | 154 | ], |
155 | 155 | "availability": { |
156 | | - "isPreview": true, |
| 156 | + "isPreview": false, |
157 | 157 | "status": 1 |
158 | 158 | }, |
159 | 159 | "permissions": { |
|
0 commit comments