mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
3b58b30516
Adding custom functions & playbooks
109 lines
2.8 KiB
JSON
109 lines
2.8 KiB
JSON
{
|
|
"create_time": "2021-04-28T19:53:33.624071+00:00",
|
|
"custom_function_id": "b524eca7afdfcb2a4714529f28e5f0142b12d459",
|
|
"description": "Merge 2-10 different data paths into a single output data path. For example, if IP addresses are stored in the fields sourceAddress, destinationAddress, and deviceAddress, then those three fields could be merged together to form a single list of IP addresses.",
|
|
"draft_mode": false,
|
|
"inputs": [
|
|
{
|
|
"contains_type": [
|
|
"*"
|
|
],
|
|
"description": "",
|
|
"input_type": "list",
|
|
"name": "input_1",
|
|
"placeholder": ""
|
|
},
|
|
{
|
|
"contains_type": [
|
|
"*"
|
|
],
|
|
"description": "",
|
|
"input_type": "list",
|
|
"name": "input_2",
|
|
"placeholder": ""
|
|
},
|
|
{
|
|
"contains_type": [
|
|
"*"
|
|
],
|
|
"description": "",
|
|
"input_type": "list",
|
|
"name": "input_3",
|
|
"placeholder": ""
|
|
},
|
|
{
|
|
"contains_type": [
|
|
"*"
|
|
],
|
|
"description": "",
|
|
"input_type": "list",
|
|
"name": "input_4",
|
|
"placeholder": ""
|
|
},
|
|
{
|
|
"contains_type": [
|
|
"*"
|
|
],
|
|
"description": "",
|
|
"input_type": "list",
|
|
"name": "input_5",
|
|
"placeholder": ""
|
|
},
|
|
{
|
|
"contains_type": [
|
|
"*"
|
|
],
|
|
"description": "",
|
|
"input_type": "list",
|
|
"name": "input_6",
|
|
"placeholder": ""
|
|
},
|
|
{
|
|
"contains_type": [
|
|
"*"
|
|
],
|
|
"description": "",
|
|
"input_type": "list",
|
|
"name": "input_7",
|
|
"placeholder": ""
|
|
},
|
|
{
|
|
"contains_type": [
|
|
"*"
|
|
],
|
|
"description": "",
|
|
"input_type": "list",
|
|
"name": "input_8",
|
|
"placeholder": ""
|
|
},
|
|
{
|
|
"contains_type": [
|
|
"*"
|
|
],
|
|
"description": "",
|
|
"input_type": "list",
|
|
"name": "input_9",
|
|
"placeholder": ""
|
|
},
|
|
{
|
|
"contains_type": [
|
|
"*"
|
|
],
|
|
"description": "",
|
|
"input_type": "list",
|
|
"name": "input_10",
|
|
"placeholder": ""
|
|
}
|
|
],
|
|
"outputs": [
|
|
{
|
|
"contains_type": [
|
|
"*"
|
|
],
|
|
"data_path": "*.item",
|
|
"description": "A combined list of all the values from all the input lists"
|
|
}
|
|
],
|
|
"platform_version": "4.10.3.51237",
|
|
"python_version": "3"
|
|
} |