splunk-security_content/spec/deployments.spec.json

{
  "title": "Deployment",
  "type": "object",
  "properties": {
    "name": {
      "title": "Name",
      "type": "string"
    },
    "id": {
      "title": "Id",
      "type": "string"
    },
    "date": {
      "title": "Date",
      "type": "string"
    },
    "author": {
      "title": "Author",
      "type": "string"
    },
    "description": {
      "title": "Description",
      "type": "string"
    },
    "scheduling": {
      "$ref": "#/definitions/DeploymentScheduling"
    },
    "email": {
      "$ref": "#/definitions/DeploymentEmail"
    },
    "notable": {
      "$ref": "#/definitions/DeploymentNotable"
    },
    "rba": {
      "$ref": "#/definitions/DeploymentRBA"
    },
    "slack": {
      "$ref": "#/definitions/DeploymentSlack"
    },
    "phantom": {
      "$ref": "#/definitions/DeploymentPhantom"
    },
    "tags": {
      "title": "Tags",
      "type": "object"
    }
  },
  "required": [
    "name",
    "id",
    "date",
    "author",
    "description",
    "tags"
  ],
  "definitions": {
    "DeploymentScheduling": {
      "title": "DeploymentScheduling",
      "type": "object",
      "properties": {
        "cron_schedule": {
          "title": "Cron Schedule",
          "type": "string"
        },
        "earliest_time": {
          "title": "Earliest Time",
          "type": "string"
        },
        "latest_time": {
          "title": "Latest Time",
          "type": "string"
        },
        "schedule_window": {
          "title": "Schedule Window",
          "type": "string"
        }
      },
      "required": [
        "cron_schedule",
        "earliest_time",
        "latest_time",
        "schedule_window"
      ]
    },
    "DeploymentEmail": {
      "title": "DeploymentEmail",
      "type": "object",
      "properties": {
        "message": {
          "title": "Message",
          "type": "string"
        },
        "subject": {
          "title": "Subject",
          "type": "string"
        },
        "to": {
          "title": "To",
          "type": "string"
        }
      },
      "required": [
        "message",
        "subject",
        "to"
      ]
    },
    "DeploymentNotable": {
      "title": "DeploymentNotable",
      "type": "object",
      "properties": {
        "rule_description": {
          "title": "Rule Description",
          "type": "string"
        },
        "rule_title": {
          "title": "Rule Title",
          "type": "string"
        },
        "nes_fields": {
          "title": "Nes Fields",
          "type": "array",
          "items": {}
        }
      },
      "required": [
        "rule_description",
        "rule_title",
        "nes_fields"
      ]
    },
    "DeploymentRBA": {
      "title": "DeploymentRBA",
      "type": "object",
      "properties": {
        "enabled": {
          "title": "Enabled",
          "type": "string"
        }
      },
      "required": [
        "enabled"
      ]
    },
    "DeploymentSlack": {
      "title": "DeploymentSlack",
      "type": "object",
      "properties": {
        "channel": {
          "title": "Channel",
          "type": "string"
        },
        "message": {
          "title": "Message",
          "type": "string"
        }
      },
      "required": [
        "channel",
        "message"
      ]
    },
    "DeploymentPhantom": {
      "title": "DeploymentPhantom",
      "type": "object",
      "properties": {
        "cam_workers": {
          "title": "Cam Workers",
          "type": "string"
        },
        "label": {
          "title": "Label",
          "type": "string"
        },
        "phantom_server": {
          "title": "Phantom Server",
          "type": "string"
        },
        "sensitivity": {
          "title": "Sensitivity",
          "type": "string"
        },
        "severity": {
          "title": "Severity",
          "type": "string"
        }
      },
      "required": [
        "cam_workers",
        "label",
        "phantom_server",
        "sensitivity",
        "severity"
      ]
    }
  }
}