Skip to content

Make the TA cloud compatible and migrate to lates UCC Framework version #57

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
tegge wants to merge 1 commit into from
Closed

Make the TA cloud compatible and migrate to lates UCC Framework version #57

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file added add-on/TA-Demisto_ucc/TA-Demisto-0.0.0+204c933.tar.gz
View file
Open in desktop
Binary file not shown.
236 changes: 236 additions & 0 deletions add-on/TA-Demisto_ucc/globalConfig.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,236 @@
{
"meta": {
"name": "TA-Demisto",
"displayName": "Demisto Add-On for Splunk",
"version": "0.0.0+204c933",
"restRoot": "TA_Demisto",
"schemaVersion": "0.0.10"
},
"pages": {
"configuration": {
"title": "Configuration",
"description": "Set up XSOAR add-on",
"tabs": [
{
"name": "account",
"title": "XSOAR Instances",
"table": {
"header": [
{
"field": "name",
"label": "XSOAR Instance name"
},
{
"field": "username",
"label": "XSOAR Server URL"
}
],
"actions": [
"edit",
"delete",
"clone"
]
},
"entity": [
{
"field": "name",
"label": "XSOAR Instance name",
"type": "text",
"required": true,
"help": "Enter a unique name for this instance.",
"validators": [
{
"type": "string",
"minLength": 1,
"maxLength": 50,
"errorMsg": "Length of Instance name should be between 1 and 50"
},
{
"type": "regex",
"pattern": "^[a-zA-Z]\\w*$",
"errorMsg": "Instance name must start with a letter and followed by alphabetic letters, digits or underscores."
}
]
},
{
"field": "xsoar_server",
"label": "XSOAR Server URL",
"type": "text",
"required": true,
"help": "Enter the server URL for this instance. e.g. https://localhost:443",
"validators": [
{
"type": "string",
"minLength": 1,
"maxLength": 200,
"errorMsg": "Length of username should be between 1 and 200"
}
]
},
{
"field": "password",
"label": "API Key",
"type": "text",
"encrypted": true,
"required": true,
"help": "Enter the API key for this instance.",
"validators": [
{
"type": "string",
"minLength": 1,
"maxLength": 8192,
"errorMsg": "Length of API key should be between 1 and 8192"
}
]
}
]
},
{
"name": "proxy",
"title": "Proxy",
"entity": [
{
"field": "proxy_enabled",
"label": "Enable",
"type": "checkbox"
},
{
"field": "proxy_type",
"label": "Proxy Type",
"type": "singleSelect",
"options": {
"disableSearch": true,
"autoCompleteFields": [
{
"label": "http",
"value": "http"
},
{
"label": "socks4",
"value": "socks4"
},
{
"label": "socks5",
"value": "socks5"
}
]
},
"defaultValue": "http"
},
{
"field": "proxy_url",
"label": "Host",
"type": "text",
"validators": [
{
"type": "string",
"minLength": 0,
"maxLength": 4096,
"errorMsg": "Max host length is 4096"
}
]
},
{
"field": "proxy_port",
"label": "Port",
"type": "text",
"validators": [
{
"type": "number",
"range": [
1,
65535
]
}
]
},
{
"field": "proxy_username",
"label": "Username",
"type": "text",
"validators": [
{
"type": "string",
"minLength": 0,
"maxLength": 50,
"errorMsg": "Max length of username is 50"
}
]
},
{
"field": "proxy_password",
"label": "Password",
"type": "text",
"encrypted": true,
"validators": [
{
"type": "string",
"minLength": 0,
"maxLength": 8192,
"errorMsg": "Max length of password is 8192"
}
]
},
{
"field": "proxy_rdns",
"label": "Remote DNS resolution",
"type": "checkbox"
}
],
"options": {
"saveValidator": "function(formData) { if(!formData.proxy_enabled || formData.proxy_enabled === '0') {return true; } if(!formData.proxy_url) { return 'Proxy Host can not be empty'; } if(!formData.proxy_port) { return 'Proxy Port can not be empty'; } return true; }"
}
},
{
"type": "loggingTab"
},
{
"name": "additional_parameters",
"title": "Additional Settings",
"entity": [
{
"field": "ssl_cert_loc",
"label": "Location to Certificate",
"type": "text",
"help": "Enter the full path to the SSL Certificate in the Splunk server to if you are using Self Signed/Internal CA signed certificate",
"required": false,
"defaultValue": "",
"validators": [
{
"type": "string",
"minLength": 0,
"maxLength": 8192,
"errorMsg": "Max length of text input is 8192"
}
]
},
{
"field": "validate_ssl",
"label": "Validate SSL",
"type": "checkbox",
"help": "This option is not open for Splunk Cloud users.",
"required": false,
"defaultValue": 1
},
{
"field": "timeout_val",
"label": "Timeout Value",
"type": "text",
"help": "Enter the desired timeout value for creating the incident. Default is 10.",
"required": false,
"defaultValue": "10",
"validators": [
{
"type": "string",
"minLength": 0,
"maxLength": 8192,
"errorMsg": "Max length of text input is 8192"
}
]
}
]
}
]
}
}
}
12 changes: 12 additions & 0 deletions add-on/TA-Demisto_ucc/output/TA-Demisto/README.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
This is an add-on powered by the Splunk Universal Configuration Console (UCC).

# Binary File Declaration
bin/ta_***/aob_py3/setuptools/cli.exe
bin/ta_***/aob_py3/setuptools/gui-64.exe
bin/ta_***/aob_py3/setuptools/gui.exe
bin/ta_***/aob_py3/setuptools/gui-32.exe
bin/ta_***/aob_py3/setuptools/cli-64.exe
bin/ta_***/aob_py3/setuptools/gui-arm64.exe
bin/ta_***/aob_py3/setuptools/cli-arm64.exe
bin/ta_***/aob_py3/pvectorc.cpython-37m-x86_64-linux-gnu.so
bin/ta_***/aob_py3/setuptools/cli-32.exe
3 changes: 3 additions & 0 deletions add-on/TA-Demisto_ucc/output/TA-Demisto/README/ta_demisto_account.conf.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
[<name>]
password =
xsoar_server =
16 changes: 16 additions & 0 deletions add-on/TA-Demisto_ucc/output/TA-Demisto/README/ta_demisto_settings.conf.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
[proxy]
proxy_enabled =
proxy_password =
proxy_port =
proxy_rdns =
proxy_type =
proxy_url =
proxy_username =

[logging]
loglevel =

[additional_parameters]
ssl_cert_loc =
timeout_val =
validate_ssl =
2 changes: 2 additions & 0 deletions add-on/TA-Demisto_ucc/output/TA-Demisto/VERSION
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
0.0.0+204c933
0.0.0+204c933
56 changes: 56 additions & 0 deletions add-on/TA-Demisto_ucc/output/TA-Demisto/app.manifest
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,56 @@
{
"dependencies": {},
"incompatibleApps": {},
"info": {
"author": [
{
"company": null,
"email": null,
"name": "Palo Alto Networks"
}
],
"classification": {
"categories": [],
"developmentStatus": null,
"intendedAudience": null
},
"commonInformationModels": null,
"description": "This application provides an alert action to create an incident in Cortex XSOAR.",
"id": {
"group": null,
"name": "TA-Demisto",
"version": "0.0.0+204c933"
},
"license": {
"name": null,
"text": null,
"uri": null
},
"privacyPolicy": {
"name": null,
"text": null,
"uri": null
},
"releaseDate": null,
"releaseNotes": {
"name": null,
"text": null,
"uri": null
},
"title": "Demisto Add-on for Splunk"
},
"inputGroups": {},
"platformRequirements": {
"splunk": {
"Enterprise": "*"
}
},
"schemaVersion": "2.0.0",
"supportedDeployments": [
"*"
],
"targetWorkloads": [
"*"
],
"tasks": []
}
Binary file added ...-Demisto_ucc/output/TA-Demisto/appserver/static/alert_create_xsoar_incident.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added add-on/TA-Demisto_ucc/output/TA-Demisto/appserver/static/alerticon.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
1 change: 1 addition & 0 deletions ...emisto_ucc/output/TA-Demisto/appserver/static/js/build/ArrowBroadUnderbarDown.wq6id2ca.js
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading