diff --git a/data_sources/bro.yml b/data_sources/bro.yml index 100d017f03..72d2cd5415 100644 --- a/data_sources/bro.yml +++ b/data_sources/bro.yml @@ -6,5 +6,4 @@ author: Patrick Bareiss, Splunk description: Data source object for Bro source: bro:http:json sourcetype: bro:http:json -supported_TA: -- {} +supported_TA: [] diff --git a/data_sources/crushftp.yml b/data_sources/crushftp.yml index e868f787d8..7c3f19a528 100644 --- a/data_sources/crushftp.yml +++ b/data_sources/crushftp.yml @@ -6,8 +6,7 @@ author: Patrick Bareiss, Splunk description: Data source object for CrushFTP source: crushftp sourcetype: crushftp:sessionlogs -supported_TA: -- {} +supported_TA: [] fields: - _time - _raw diff --git a/data_sources/kubernetes_audit.yml b/data_sources/kubernetes_audit.yml index acc709438e..9ca3815448 100644 --- a/data_sources/kubernetes_audit.yml +++ b/data_sources/kubernetes_audit.yml @@ -6,8 +6,7 @@ author: Patrick Bareiss, Splunk description: Data source object for Kubernetes Audit source: kubernetes sourcetype: _json -supported_TA: -- {} +supported_TA: [] fields: - _time - annotations.authorization.k8s.io/decision diff --git a/data_sources/kubernetes_falco.yml b/data_sources/kubernetes_falco.yml index 731a1915c8..568d4be771 100644 --- a/data_sources/kubernetes_falco.yml +++ b/data_sources/kubernetes_falco.yml @@ -6,8 +6,7 @@ author: Patrick Bareiss, Splunk description: Data source object for Kubernetes Falco source: kubernetes sourcetype: kube:container:falco -supported_TA: -- {} +supported_TA: [] fields: - _time - command diff --git a/data_sources/linux_secure.yml b/data_sources/linux_secure.yml index 03bdd2458e..cd08575aa2 100644 --- a/data_sources/linux_secure.yml +++ b/data_sources/linux_secure.yml @@ -6,8 +6,7 @@ author: Patrick Bareiss, Splunk description: Data source object for Linux Secure source: /var/log/secure sourcetype: linux_secure -supported_TA: -- {} +supported_TA: [] fields: - _time - action diff --git a/data_sources/nginx_access.yml b/data_sources/nginx_access.yml index 0009ef0fea..87238e5c67 100644 --- a/data_sources/nginx_access.yml +++ b/data_sources/nginx_access.yml @@ -6,8 +6,7 @@ author: Patrick Bareiss, Splunk description: Data source object for Nginx Access source: /var/log/nginx/access.log sourcetype: nginx:plus:kv -supported_TA: -- {} +supported_TA: [] fields: - _time - action diff --git a/data_sources/osquery.yml b/data_sources/osquery.yml index 8bcd9cdd79..7244b5e8ce 100644 --- a/data_sources/osquery.yml +++ b/data_sources/osquery.yml @@ -6,8 +6,7 @@ author: Patrick Bareiss, Splunk description: Data source object for osquery source: osquery sourcetype: osquery:results -supported_TA: -- {} +supported_TA: [] fields: - _time - calendarTime diff --git a/data_sources/powershell_installed_iis_modules.yml b/data_sources/powershell_installed_iis_modules.yml index 663658c8a6..a27822830a 100644 --- a/data_sources/powershell_installed_iis_modules.yml +++ b/data_sources/powershell_installed_iis_modules.yml @@ -6,8 +6,7 @@ author: Patrick Bareiss, Splunk description: Data source object for Powershell Installed IIS Modules source: powershell://AppCmdModules sourcetype: Pwsh:InstalledIISModules -supported_TA: -- {} +supported_TA: [] fields: - _time - Schema diff --git a/data_sources/powershell_sip_inventory.yml b/data_sources/powershell_sip_inventory.yml index f5dfea49f6..dc02c04217 100644 --- a/data_sources/powershell_sip_inventory.yml +++ b/data_sources/powershell_sip_inventory.yml @@ -6,5 +6,4 @@ author: Patrick Bareiss, Splunk description: Data source object for Powershell SIP Inventory source: powershell://SubjectInterfacePackage sourcetype: PwSh:SubjectInterfacePackage -supported_TA: -- {} +supported_TA: [] diff --git a/data_sources/suricata.yml b/data_sources/suricata.yml index b27ac0af4b..6ad1b8e80c 100644 --- a/data_sources/suricata.yml +++ b/data_sources/suricata.yml @@ -6,8 +6,7 @@ author: Patrick Bareiss, Splunk description: Data source object for Suricata source: suricata sourcetype: suricata -supported_TA: -- {} +supported_TA: [] fields: - _time - app_proto