| 1 | { |
| 2 | "v": 1, |
| 3 | "id": "REPLACE_UUID_GLOBAL", |
| 4 | "rev": 1, |
| 5 | "name": "customer_name_CROWDSTRIKE_INPUT_TCP", |
| 6 | "summary": "customer_name_CROWDSTRIKE_INPUT_TCP", |
| 7 | "description": "", |
| 8 | "vendor": "SOCFortress", |
| 9 | "url": "", |
| 10 | "parameters": [], |
| 11 | "entities": [ |
| 12 | { |
| 13 | "v": "1", |
| 14 | "type": { |
| 15 | "name": "input", |
| 16 | "version": "1" |
| 17 | }, |
| 18 | "id": "REPLACE_UUID_SPECIFIC", |
| 19 | "data": { |
| 20 | "title": { |
| 21 | "@type": "string", |
| 22 | "@value": "customer_name - CROWDSTRIKE LOGS AND EVENTS" |
| 23 | }, |
| 24 | "configuration": { |
| 25 | "tls_key_file": { |
| 26 | "@type": "string", |
| 27 | "@value": "" |
| 28 | }, |
| 29 | "port": { |
| 30 | "@type": "integer", |
| 31 | "@value": "SYSLOG_PORT" |
| 32 | }, |
| 33 | "tls_enable": { |
| 34 | "@type": "boolean", |
| 35 | "@value": false |
| 36 | }, |
| 37 | "use_null_delimiter": { |
| 38 | "@type": "boolean", |
| 39 | "@value": false |
| 40 | }, |
| 41 | "recv_buffer_size": { |
| 42 | "@type": "integer", |
| 43 | "@value": 1048576 |
| 44 | }, |
| 45 | "tcp_keepalive": { |
| 46 | "@type": "boolean", |
| 47 | "@value": false |
| 48 | }, |
| 49 | "use_full_names": { |
| 50 | "@type": "boolean", |
| 51 | "@value": false |
| 52 | }, |
| 53 | "tls_client_auth_cert_file": { |
| 54 | "@type": "string", |
| 55 | "@value": "" |
| 56 | }, |
| 57 | "bind_address": { |
| 58 | "@type": "string", |
| 59 | "@value": "0.0.0.0" |
| 60 | }, |
| 61 | "tls_cert_file": { |
| 62 | "@type": "string", |
| 63 | "@value": "" |
| 64 | }, |
| 65 | "max_message_size": { |
| 66 | "@type": "integer", |
| 67 | "@value": 2097152 |
| 68 | }, |
| 69 | "tls_client_auth": { |
| 70 | "@type": "string", |
| 71 | "@value": "disabled" |
| 72 | }, |
| 73 | "timezone": { |
| 74 | "@type": "string", |
| 75 | "@value": "Etc/UTC" |
| 76 | }, |
| 77 | "locale": { |
| 78 | "@type": "string", |
| 79 | "@value": "" |
| 80 | }, |
| 81 | "number_worker_threads": { |
| 82 | "@type": "integer", |
| 83 | "@value": 8 |
| 84 | }, |
| 85 | "tls_key_password": { |
| 86 | "@type": "string", |
| 87 | "@value": "" |
| 88 | } |
| 89 | }, |
| 90 | "static_fields": { |
| 91 | "syslog_type": { |
| 92 | "@type": "string", |
| 93 | "@value": "crowdstrike" |
| 94 | }, |
| 95 | "syslog_customer": { |
| 96 | "@type": "string", |
| 97 | "@value": "customer_code" |
| 98 | } |
| 99 | }, |
| 100 | "type": { |
| 101 | "@type": "string", |
| 102 | "@value": "org.graylog.plugins.cef.input.CEFTCPInput" |
| 103 | }, |
| 104 | "global": { |
| 105 | "@type": "boolean", |
| 106 | "@value": false |
| 107 | }, |
| 108 | "extractors": [] |
| 109 | }, |
| 110 | "constraints": [ |
| 111 | { |
| 112 | "type": "server-version", |
| 113 | "version": ">=5.0.13+083613e" |
| 114 | } |
| 115 | ] |
| 116 | } |
| 117 | ] |
| 118 | } |