mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Patrick Bareiss
44 lines
1.1 KiB
JSON
44 lines
1.1 KiB
JSON
{
|
|
"$id": "https://api.splunkresearch.com/schemas/macros.json",
|
|
"$schema": "http://json-schema.org/draft-07/schema#",
|
|
"description": "An object that defines the parameters for a Splunk Macro",
|
|
"properties": {
|
|
"arguments": {
|
|
"description": "A list of the arguments being passed to this macro",
|
|
"items": {
|
|
"type": "string"
|
|
},
|
|
"minItems": 0,
|
|
"type": "array",
|
|
"uniqueItems": true
|
|
},
|
|
"definition": {
|
|
"description": "The macro definition",
|
|
"examples": [
|
|
"(query=fls-na* AND query = www* AND query=images*)"
|
|
],
|
|
"type": "string"
|
|
},
|
|
"description": {
|
|
"description": "What the macro is intended to filter",
|
|
"examples": [
|
|
"Use this macro to filter out known good objects"
|
|
],
|
|
"type": "string"
|
|
},
|
|
"name": {
|
|
"description": "The name of the macro",
|
|
"examples": [
|
|
"detection_search_output_filter"
|
|
],
|
|
"type": "string"
|
|
}
|
|
},
|
|
"required": [
|
|
"name",
|
|
"description"
|
|
],
|
|
"title": "Macro Manifest",
|
|
"type": "object"
|
|
}
|