You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
SH-Deployer/apps/SA-ITOA/default/itsi_data_integration_templ...

642 lines
19 KiB

[generic]
title = Generic Default Template
_key = generic
data_source = generic
mapping_fields = [ \
{ \
"name": "src", \
"display_name": "Source", \
"type": "source_field", \
"required": true, \
"default_value": "generic" \
}, \
{ \
"name": "signature", \
"display_name": "Signature", \
"type": "notable_event_field", \
"required": true, \
"default_value": "default_generic_signature" \
}, \
{ \
"name": "vendor_severity", \
"display_name": "Vendor Severity", \
"type": "notable_event_field", \
"required": true, \
"default_value": "OK" \
}, \
{ \
"name": "title", \
"display_name": "Title", \
"type": "notable_event_field", \
"required": true, \
"default_value": "default_title" \
}, \
{ \
"name": "owner", \
"display_name": "Owner", \
"type": "notable_event_field", \
"required": true, \
"input_type": "conf", \
"default_selected_key": "unassigned", \
"default_value": "unassigned" \
}, \
{ \
"name": "status", \
"display_name": "Status", \
"type": "notable_event_field", \
"required": true, \
"input_type": "conf", \
"default_selected_key": "1", \
"default_value": "1" \
}, \
{ \
"name": "subcomponent", \
"display_name": "Subcomponent", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "description", \
"display_name": "Description", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "app", \
"display_name": "App", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownSearchName", \
"display_name": "ITSI Drilldown Search Name", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownSearch", \
"display_name": "ITSI Drilldown Search", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownEarliestOffset", \
"display_name": "ITSI Drilldown earliest offset", \
"type": "notable_event_field", \
"required": false, \
"default_value": "-900" \
}, \
{ \
"name": "itsiDrilldownLatestOffset", \
"display_name": "ITSI Drilldown latest offset", \
"type": "notable_event_field", \
"required": false, \
"default_value": "900" \
}, \
{ \
"name": "itsiDrilldownWebName", \
"display_name": "ITSI Drilldown Website Name", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownWebURL", \
"display_name": "ITSI Drilldown Website URL", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsi_instruction", \
"display_name": "ITSI Instruction", \
"type": "notable_event_field", \
"required": false \
} \
]
throttling_group_by_fields = ["signature", "src", "subcomponent"]
mapping_field_options = []
severity_id_mapping = case(lower(vendor_severity)="critical", 6, lower(vendor_severity)="high", 5, lower(vendor_severity)="medium", 4, lower(vendor_severity)="low", 3, lower(vendor_severity)="normal", 2, lower(vendor_severity)="info", 1, lower(vendor_severity)="warning", 3, lower(vendor_severity)="ok", 2, lower(vendor_severity)="down", 6, lower(vendor_severity)="up", 2, 1=1, 1)
status_id_mapping =
[nagios]
title = Nagios Default Template
_key = nagios
data_source = nagios
mapping_fields = [ \
{ \
"name": "src", \
"display_name": "Source", \
"type": "source_field", \
"required": true, \
"default_value": "nagios", \
"input_type": "composition", \
"default_selected_field": "src" \
}, \
{ \
"name": "signature", \
"display_name": "Signature", \
"type": "notable_event_field", \
"required": true, \
"default_value": "default_nagios_signature", \
"input_type": "composition", \
"default_selected_field": "eventname" \
}, \
{ \
"name": "vendor_severity", \
"display_name": "Vendor Severity", \
"type": "notable_event_field", \
"required": true, \
"default_value": "OK", \
"input_type": "composition", \
"default_selected_field": "status_code" \
}, \
{ \
"name": "title", \
"display_name": "Title", \
"type": "notable_event_field", \
"required": true, \
"default_value": "default_title" \
}, \
{ \
"name": "owner", \
"display_name": "Owner", \
"type": "notable_event_field", \
"required": true, \
"input_type": "conf", \
"default_selected_key": "unassigned", \
"default_value": "unassigned" \
}, \
{ \
"name": "status", \
"display_name": "Status", \
"type": "notable_event_field", \
"required": true, \
"input_type": "conf", \
"default_selected_key": "1", \
"default_value": "1" \
}, \
{ \
"name": "subcomponent", \
"display_name": "Subcomponent", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "description", \
"display_name": "Description", \
"type": "notable_event_field", \
"required": false, \
"input_type": "composition", \
"default_selected_field": "body" \
}, \
{ \
"name": "app", \
"display_name": "App", \
"type": "notable_event_field", \
"required": false, \
"input_type": "composition", \
"default_selected_field": "app" \
}, \
{ \
"name": "itsiDrilldownSearchName", \
"display_name": "ITSI Drilldown Search Name", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownSearch", \
"display_name": "ITSI Drilldown Search", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownEarliestOffset", \
"display_name": "ITSI Drilldown earliest offset", \
"type": "notable_event_field", \
"required": false, \
"default_value": "-900" \
}, \
{ \
"name": "itsiDrilldownLatestOffset", \
"display_name": "ITSI Drilldown latest offset", \
"type": "notable_event_field", \
"required": false, \
"default_value": "900" \
}, \
{ \
"name": "itsiDrilldownWebName", \
"display_name": "ITSI Drilldown Website Name", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownWebURL", \
"display_name": "ITSI Drilldown Website URL", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsi_instruction", \
"display_name": "ITSI Instruction", \
"type": "notable_event_field", \
"required": false \
} \
]
throttling_group_by_fields = ["signature", "src", "subcomponent"]
mapping_field_options = []
severity_id_mapping = case(lower(vendor_severity)="critical", 6, lower(vendor_severity)="warning", 3, lower(vendor_severity)="ok", 2, lower(vendor_severity)="down", 6, lower(vendor_severity)="up", 2, 1=1, 1)
status_id_mapping =
[scom]
title = Microsoft SCOM Default Template
_key = scom
data_source = scom
mapping_fields = [ \
{ \
"name": "src", \
"display_name": "Source", \
"type": "source_field", \
"required": true, \
"default_value": "scom", \
"input_type": "composition", \
"default_selected_field": "host" \
}, \
{ \
"name": "signature", \
"display_name": "Signature", \
"type": "notable_event_field", \
"required": true, \
"default_value": "default_scom_signature", \
"input_type": "composition", \
"default_selected_field": "name" \
}, \
{ \
"name": "vendor_severity", \
"display_name": "Vendor Severity", \
"type": "notable_event_field", \
"required": true, \
"default_value": "informational", \
"input_type": "composition", \
"default_selected_field": "vendor_severity" \
}, \
{ \
"name": "title", \
"display_name": "Title", \
"type": "notable_event_field", \
"required": true, \
"default_value": "default_title" \
}, \
{ \
"name": "owner", \
"display_name": "Owner", \
"type": "notable_event_field", \
"required": true, \
"input_type": "conf", \
"default_selected_key": "unassigned", \
"default_value": "unassigned" \
}, \
{ \
"name": "status", \
"display_name": "Status", \
"type": "notable_event_field", \
"required": true, \
"input_type": "conf", \
"default_selected_key": "1", \
"default_value": "1" \
}, \
{ \
"name": "subcomponent", \
"display_name": "Subcomponent", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "description", \
"display_name": "Description", \
"type": "notable_event_field", \
"required": false, \
"input_type": "composition", \
"default_selected_field": "description" \
}, \
{ \
"name": "app", \
"display_name": "App", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownSearchName", \
"display_name": "ITSI Drilldown Search Name", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownSearch", \
"display_name": "ITSI Drilldown Search", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownEarliestOffset", \
"display_name": "ITSI Drilldown earliest offset", \
"type": "notable_event_field", \
"required": false, \
"default_value": "-900" \
}, \
{ \
"name": "itsiDrilldownLatestOffset", \
"display_name": "ITSI Drilldown latest offset", \
"type": "notable_event_field", \
"required": false, \
"default_value": "900" \
}, \
{ \
"name": "itsiDrilldownWebName", \
"display_name": "ITSI Drilldown Website Name", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownWebURL", \
"display_name": "ITSI Drilldown Website URL", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsi_instruction", \
"display_name": "ITSI Instruction", \
"type": "notable_event_field", \
"required": false \
} \
]
throttling_group_by_fields = ["signature", "src", "subcomponent"]
mapping_field_options = []
severity_id_mapping = case(lower(vendor_severity)="critical", 6, lower(vendor_severity)="error", 5, lower(vendor_severity)="warning", 4, lower(vendor_severity)="informational", 1, 1=1, 1)
status_id_mapping =
[o11y]
title = O11y Default Template
_key = o11y
data_source = o11y
mapping_fields = [ \
{ \
"name": "src", \
"display_name": "Source", \
"type": "source_field", \
"required": true, \
"default_value": "o11y", \
"input_type": "composition", \
"default_selected_field": "src" \
}, \
{ \
"name": "signature", \
"display_name": "Signature", \
"type": "notable_event_field", \
"required": true, \
"default_value": "default_o11y_signature", \
"input_type": "composition", \
"default_selected_field": "signature" \
}, \
{ \
"name": "vendor_severity", \
"display_name": "Vendor Severity", \
"type": "notable_event_field", \
"required": true, \
"default_value": "OK", \
"input_type": "composition", \
"default_selected_field": "vendor_severity" \
}, \
{ \
"name": "title", \
"display_name": "Title", \
"type": "notable_event_field", \
"required": true, \
"default_value": "default_title", \
"input_type": "composition", \
"default_selected_field": "signature" \
}, \
{ \
"name": "owner", \
"display_name": "Owner", \
"type": "notable_event_field", \
"required": true, \
"input_type": "conf", \
"default_selected_key": "unassigned", \
"default_value": "unassigned" \
}, \
{ \
"name": "status", \
"display_name": "Status", \
"type": "notable_event_field", \
"required": true, \
"input_type": "conf", \
"default_selected_key": "1", \
"default_value": "1" \
}, \
{ \
"name": "subcomponent", \
"display_name": "Subcomponent", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "description", \
"display_name": "Description", \
"type": "notable_event_field", \
"required": false, \
"input_type": "composition", \
"default_selected_field": "description" \
}, \
{ \
"name": "app", \
"display_name": "App", \
"type": "notable_event_field", \
"required": false, \
"input_type": "composition", \
"default_selected_field": "app" \
}, \
{ \
"name": "itsiDrilldownSearchName", \
"display_name": "ITSI Drilldown Search Name", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownSearch", \
"display_name": "ITSI Drilldown Search", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownEarliestOffset", \
"display_name": "ITSI Drilldown earliest offset", \
"type": "notable_event_field", \
"required": false, \
"default_value": "-900" \
}, \
{ \
"name": "itsiDrilldownLatestOffset", \
"display_name": "ITSI Drilldown latest offset", \
"type": "notable_event_field", \
"required": false, \
"default_value": "900" \
}, \
{ \
"name": "itsiDrilldownWebName", \
"display_name": "ITSI Drilldown Website Name", \
"type": "notable_event_field", \
"required": false, \
"input_type": "composition", \
"default_selected_field": "itsiDrilldownWeb" \
}, \
{ \
"name": "itsiDrilldownWebURL", \
"display_name": "ITSI Drilldown Website URL", \
"type": "notable_event_field", \
"required": false, \
"input_type": "composition", \
"default_selected_field": "itsiDrilldownURI" \
}, \
{ \
"name": "itsi_instruction", \
"display_name": "ITSI Instruction", \
"type": "notable_event_field", \
"required": false, \
"input_type": "composition", \
"default_selected_field": "itsi_instruction" \
} \
]
throttling_group_by_fields = ["signature", "src", "subcomponent"]
mapping_field_options = []
severity_id_mapping = severity_id
status_id_mapping =
[solarwinds]
title = Solarwinds Default Template
_key = solarwinds
data_source = solarwinds
mapping_fields = [ \
{ \
"name": "src", \
"display_name": "Source", \
"type": "source_field", \
"required": true, \
"default_value": "solarwinds", \
"input_type": "regex", \
"regex": ".*\\\/\\\/(?<itsi_field_name>[^\\\/]*)", \
"regex_source": "Uri" \
}, \
{ \
"name": "signature", \
"display_name": "Signature", \
"type": "notable_event_field", \
"required": true, \
"default_value": "default_solarwinds_signature", \
"input_type": "regex", \
"regex": "Component\\s+(?<itsi_field_name>\"[^\"]+\"|[\\w]+)", \
"regex_source": "Message" \
}, \
{ \
"name": "vendor_severity", \
"display_name": "Vendor Severity", \
"type": "notable_event_field", \
"required": true, \
"default_value": "OK", \
"input_type": "regex", \
"regex": ".* is (?<itsi_field_name>\\w+)", \
"regex_source": "Message" \
}, \
{ \
"name": "title", \
"display_name": "Title", \
"type": "notable_event_field", \
"required": true, \
"default_value": "default_title" \
}, \
{ \
"name": "owner", \
"display_name": "Owner", \
"type": "notable_event_field", \
"required": true, \
"input_type": "conf", \
"default_selected_key": "unassigned", \
"default_value": "unassigned" \
}, \
{ \
"name": "status", \
"display_name": "Status", \
"type": "notable_event_field", \
"required": true, \
"input_type": "conf", \
"default_selected_key": "1", \
"default_value": "1" \
}, \
{ \
"name": "subcomponent", \
"display_name": "Subcomponent", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "description", \
"display_name": "Description", \
"type": "notable_event_field", \
"required": false, \
"input_type": "composition", \
"default_selected_key": "description" \
}, \
{ \
"name": "app", \
"display_name": "App", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownSearchName", \
"display_name": "ITSI Drilldown Search Name", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownSearch", \
"display_name": "ITSI Drilldown Search", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownEarliestOffset", \
"display_name": "ITSI Drilldown earliest offset", \
"type": "notable_event_field", \
"required": false, \
"default_value": "-900" \
}, \
{ \
"name": "itsiDrilldownLatestOffset", \
"display_name": "ITSI Drilldown latest offset", \
"type": "notable_event_field", \
"required": false, \
"default_value": "900" \
}, \
{ \
"name": "itsiDrilldownWebName", \
"display_name": "ITSI Drilldown Website Name", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsiDrilldownWebURL", \
"display_name": "ITSI Drilldown Website URL", \
"type": "notable_event_field", \
"required": false \
}, \
{ \
"name": "itsi_instruction", \
"display_name": "ITSI Instruction", \
"type": "notable_event_field", \
"required": false \
} \
]
throttling_group_by_fields = ["signature", "src", "subcomponent"]
mapping_field_options = []
severity_id_mapping = case(lower(vendor_severity)="down", 6, lower(vendor_severity)="up", 2, lower(vendor_severity)="critical", 6, lower(vendor_severity)="warning", 3, 1=1, 1)
status_id_mapping =