-
Notifications
You must be signed in to change notification settings - Fork 1.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[AI-4764] DDS: Ivanti Connect Secure Integration v1.0.0 #19237
[AI-4764] DDS: Ivanti Connect Secure Integration v1.0.0 #19237
Conversation
Created DOCS-9701 for Docs team review. |
@shubhamvekariya-crest you can run this command to fix the license headers:
|
Stale Review dismissed by prbot
Done, Fixed |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Docs team here, I did an initial pass for style but can come back for final build checks once you've had a chance to review those. Thank you!
ivanti_connect_secure/README.md
Outdated
|
||
#### Log collection | ||
|
||
1. Collecting logs is disabled by default in the Datadog Agent. Enable it in the `datadog.yaml`: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
1. Collecting logs is disabled by default in the Datadog Agent. Enable it in the `datadog.yaml`: | |
1. Collecting logs is disabled by default in the Datadog Agent. Enable it in `datadog.yaml`: |
or "the datadog-yaml
file"
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
updated to in `datadog.yaml`:
ivanti_connect_secure/README.md
Outdated
4. Under **Select Events to Log**, ensure all event types are selected. | ||
5. Click **Save Changes** to apply the configuration. | ||
6. Configure the syslog server details in the **Syslog Servers** section: | ||
- **Server name/IP**: Enter the fully qualified domain name or IP address of the syslog server in the format `<IP/domain>:<port>`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
- **Server name/IP**: Enter the fully qualified domain name or IP address of the syslog server in the format `<IP/domain>:<port>`. | |
- **Server name/IP**: Enter the fully qualified domain name or IP address of the syslog server in the format `<IP/DOMAIN>:<PORT>`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done
ivanti_connect_secure/assets/dashboards/ivanti_connect_secure_statistics_and_system_status.json
Outdated
Show resolved
Hide resolved
{ | ||
"id": 6592991177188294, | ||
"definition": { | ||
"title": "Detected Files over time", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
"title": "Detected Files over time", | |
"title": "Detected Files over Time", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done
ivanti_connect_secure/assets/dashboards/ivanti_connect_secure_statistics_and_system_status.json
Outdated
Show resolved
Hide resolved
{ | ||
"id": 8702748035003160, | ||
"definition": { | ||
"title": "Web Requests Logs over time", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
"title": "Web Requests Logs over time", | |
"title": "Web Requests Logs over Time", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done
ivanti_connect_secure/assets/dashboards/ivanti_connect_secure_web_requests.json
Outdated
Show resolved
Hide resolved
* Added ivanti connect secure integration * Fix changelog CI failure * Resolve CI failures * Resolve CI failures * Resolve CI failures * Resolve CI failures * Resolve CI failures * Update pipeline * Update Authentication grok Parser * Update Authentication dashboard * Update parser name * Fix the license headers * Address review comments --------- Co-authored-by: Thibault Krebs <[email protected]> 401100e
What does this PR do?
PR for a new integration Ivanti Connect Secure 1.0.0
Additional Notes
-- OOTB detection rules JSON would be shared separately with the required teams as a part of separate repository .
-- Since during the standard attribute remapping we are not preserving the source attributes as per suggested best practices, it would result in filters using these standard attributes populating the values of other integrations as well as per current datadog behaviour.
Review checklist (to be filled by reviewers)
qa/skip-qa
label if the PR doesn't need to be tested during QA.backport/<branch-name>
label to the PR and it will automatically open a backport PR once this one is merged