mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Eric McGinnis
69 lines
3.5 KiB
JSON
69 lines
3.5 KiB
JSON
{
|
|
"additionalProperties": false,
|
|
"description": "Represents a Dashboard object.\n\nDashboards are used to visualize data in a way that is easy to understand.\nThey are built in product using the Dashboard Editor/Creator:\nhttps://help.splunk.com/en/splunk-enterprise/create-dashboards-and-reports/simple-xml-dashboards/10.0/introduction/getting-started\n\nThese dashboards are then exported from the product as *.json files.",
|
|
"properties": {
|
|
"name": {
|
|
"description": "Each Security Content Object must have a unique name. Due to issues with how local/default stanzas are merged in the Splunk products, these names MUST NOT change between subsequent releases of content packs.",
|
|
"title": "Name",
|
|
"type": "string"
|
|
},
|
|
"id": {
|
|
"description": "Each Security Content Object must have a unique identifier. This is particularly important when leveraging many of the Content Versioning features built into Enterprise Security 8+. Unique ids may be generated with a python command such as `uuid.uuid4()` or similar.",
|
|
"format": "uuid",
|
|
"title": "Id",
|
|
"type": "string"
|
|
},
|
|
"version": {
|
|
"description": "The version of this object. This number MUST be incremented in the following circumstances:\n1. Any time the object in this file is modified\n2. Any time that the serialization logic for this object changes, changing what is written in its conf file stanza(s)\n3. Any time that an object this object references, for example via enrichment, causes a change in its associated conf file stanzas(s).\nThis final determination is challenging to make manually, so the `contentctl inspect command` will help identify when this a version increment is required.",
|
|
"exclusiveMinimum": 0,
|
|
"title": "Version",
|
|
"type": "integer"
|
|
},
|
|
"creation_date": {
|
|
"description": "The date that this object was created. This should NEVER be updated.",
|
|
"format": "date",
|
|
"title": "Creation Date",
|
|
"type": "string"
|
|
},
|
|
"modification_date": {
|
|
"description": "The date that this object was last modified. This should be updated whenever the object is modified.",
|
|
"format": "date",
|
|
"title": "Modification Date",
|
|
"type": "string"
|
|
},
|
|
"author": {
|
|
"description": "The author of this object. This is a freeform string that can be used to identify the author of the object. It will eventually be replaced by a more detailed Contributors list.",
|
|
"title": "Author",
|
|
"type": "string"
|
|
},
|
|
"description": {
|
|
"description": "A description of the Security Content Object. This should be a human-readable description of the object, including its purpose.",
|
|
"title": "Description",
|
|
"type": "string"
|
|
},
|
|
"references": {
|
|
"description": "A list of references to external resources that are relevant to this object. This can include links to documentation, blog posts, or other resources that provide additional context or information about the object.",
|
|
"items": {
|
|
"format": "uri",
|
|
"maxLength": 2083,
|
|
"minLength": 1,
|
|
"type": "string"
|
|
},
|
|
"minItems": 0,
|
|
"title": "References",
|
|
"type": "array",
|
|
"uniqueItems": true
|
|
}
|
|
},
|
|
"required": [
|
|
"name",
|
|
"id",
|
|
"version",
|
|
"creation_date",
|
|
"modification_date",
|
|
"author",
|
|
"description"
|
|
],
|
|
"title": "Dashboard",
|
|
"type": "object"
|
|
} |