Skip to content

Commit

Permalink
Refresh intakes documentation
Browse files Browse the repository at this point in the history
  • Loading branch information
1 parent daf66b7 commit b96ccf5
Show file tree
Hide file tree
Showing 4 changed files with 250 additions and 25 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ The following table lists the data source offered by this integration.

| Data Source | Description |
| ----------- | ------------------------------------ |
| `Authentication logs` | Cisco Duo Security provides audit logs about authentication sessions |
| `Authentication logs` | Duo Security provides audit logs about authentication sessions |



Expand Down Expand Up @@ -48,7 +48,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
"@timestamp": "2020-01-23T16:18:58Z",
"observer": {
"vendor": "Duo",
"product": "Cisco Duo Security"
"product": "Duo Security"
}
}
Expand All @@ -75,7 +75,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
"@timestamp": "2020-01-24T15:09:42Z",
"observer": {
"vendor": "Duo",
"product": "Cisco Duo Security"
"product": "Duo Security"
},
"user": {
"name": "admin"
Expand Down Expand Up @@ -114,7 +114,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
"@timestamp": "2020-02-13T18:56:20.351346Z",
"observer": {
"vendor": "Duo",
"product": "Cisco Duo Security"
"product": "Duo Security"
},
"user": {
"email": "[email protected]",
Expand Down Expand Up @@ -173,7 +173,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
"@timestamp": "2019-08-30T16:10:05Z",
"observer": {
"vendor": "Duo",
"product": "Cisco Duo Security"
"product": "Duo Security"
},
"duo": {
"security": {
Expand Down Expand Up @@ -226,7 +226,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
},
"observer": {
"vendor": "Duo",
"product": "Cisco Duo Security"
"product": "Duo Security"
},
"duo": {
"security": {
Expand Down Expand Up @@ -260,7 +260,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
},
"observer": {
"vendor": "Duo",
"product": "Cisco Duo Security"
"product": "Duo Security"
},
"duo": {
"security": {
Expand Down Expand Up @@ -294,7 +294,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
},
"observer": {
"vendor": "Duo",
"product": "Cisco Duo Security"
"product": "Duo Security"
},
"duo": {
"security": {
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ The following table lists the data source offered by this integration.
| ----------- | ------------------------------------ |
| `Authentication logs` | There's an authentification audit, control and diagnostic |
| `Network device configuration` | Changing conf of devices usually by the admin |
| `Web logs` | Cisco Identity Services Engine (ISE) logs provide information about the connected client and the requested resource |
| `Web logs` | Cisco ISE logs provide information about the connected client and the requested resource |



Expand Down Expand Up @@ -47,7 +47,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
},
"observer": {
"vendor": "Cisco",
"product": "Cisco Identity Services Engine (ISE)"
"product": "Cisco ISE"
},
"user": {
"name": "john.doe"
Expand Down Expand Up @@ -86,7 +86,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
},
"observer": {
"vendor": "Cisco",
"product": "Cisco Identity Services Engine (ISE)"
"product": "Cisco ISE"
}
}
Expand All @@ -111,7 +111,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
},
"observer": {
"vendor": "Cisco",
"product": "Cisco Identity Services Engine (ISE)"
"product": "Cisco ISE"
},
"cisco": {
"ise": {
Expand Down Expand Up @@ -143,7 +143,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
},
"observer": {
"vendor": "Cisco",
"product": "Cisco Identity Services Engine (ISE)"
"product": "Cisco ISE"
}
}
Expand All @@ -167,7 +167,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
},
"observer": {
"vendor": "Cisco",
"product": "Cisco Identity Services Engine (ISE)"
"product": "Cisco ISE"
},
"source": {
"domain": "servername",
Expand Down Expand Up @@ -205,7 +205,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
},
"observer": {
"vendor": "Cisco",
"product": "Cisco Identity Services Engine (ISE)"
"product": "Cisco ISE"
},
"source": {
"domain": "servername",
Expand Down Expand Up @@ -249,7 +249,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
},
"observer": {
"vendor": "Cisco",
"product": "Cisco Identity Services Engine (ISE)"
"product": "Cisco ISE"
},
"cisco": {
"ise": {
Expand Down Expand Up @@ -293,7 +293,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
},
"observer": {
"vendor": "Cisco",
"product": "Cisco Identity Services Engine (ISE)"
"product": "Cisco ISE"
},
"user": {
"name": "admin"
Expand Down
Loading

0 comments on commit b96ccf5

Please sign in to comment.