diff --git a/alerts/google-cloud-chronicle/metadata.yaml b/alerts/google-cloud-chronicle/metadata.yaml index 75d5bada7d..2b019aa752 100644 --- a/alerts/google-cloud-chronicle/metadata.yaml +++ b/alerts/google-cloud-chronicle/metadata.yaml @@ -3,15 +3,27 @@ alert_policy_templates: id: silent-forwarder description: "sample policy to detect a single silent Chronicle forwarder using collector_id filter" version: 1 + related_integrations: + - id: chronicle_security + platform: GCP - id: forwarder-buffer-usage-more-than-threshold-with-filters description: "sample policy to detect forwarder mean buffer used is more than 1% over a 1 hour window for input type pcap and buffer type memory" version: 1 + related_integrations: + - id: chronicle_security + platform: GCP - id: all-silent-forwarder-logtype-combinations-except-few-logtypes description: "sample policy to detect all silent Chronicle forwarder and logtype combinations except few logtypes" version: 1 + related_integrations: + - id: chronicle_security + platform: GCP - id: all-silent-forwarder-logtype-combinations description: "sample policy to detect all silent Chronicle forwarder and logtype combinations" - version: 1 \ No newline at end of file + version: 1 + related_integrations: + - id: chronicle_security + platform: GCP \ No newline at end of file