You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
642 lines
19 KiB
642 lines
19 KiB
[generic]
|
|
title = Generic Default Template
|
|
_key = generic
|
|
data_source = generic
|
|
mapping_fields = [ \
|
|
{ \
|
|
"name": "src", \
|
|
"display_name": "Source", \
|
|
"type": "source_field", \
|
|
"required": true, \
|
|
"default_value": "generic" \
|
|
}, \
|
|
{ \
|
|
"name": "signature", \
|
|
"display_name": "Signature", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"default_value": "default_generic_signature" \
|
|
}, \
|
|
{ \
|
|
"name": "vendor_severity", \
|
|
"display_name": "Vendor Severity", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"default_value": "OK" \
|
|
}, \
|
|
{ \
|
|
"name": "title", \
|
|
"display_name": "Title", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"default_value": "default_title" \
|
|
}, \
|
|
{ \
|
|
"name": "owner", \
|
|
"display_name": "Owner", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"input_type": "conf", \
|
|
"default_selected_key": "unassigned", \
|
|
"default_value": "unassigned" \
|
|
}, \
|
|
{ \
|
|
"name": "status", \
|
|
"display_name": "Status", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"input_type": "conf", \
|
|
"default_selected_key": "1", \
|
|
"default_value": "1" \
|
|
}, \
|
|
{ \
|
|
"name": "subcomponent", \
|
|
"display_name": "Subcomponent", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "description", \
|
|
"display_name": "Description", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "app", \
|
|
"display_name": "App", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownSearchName", \
|
|
"display_name": "ITSI Drilldown Search Name", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownSearch", \
|
|
"display_name": "ITSI Drilldown Search", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownEarliestOffset", \
|
|
"display_name": "ITSI Drilldown earliest offset", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"default_value": "-900" \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownLatestOffset", \
|
|
"display_name": "ITSI Drilldown latest offset", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"default_value": "900" \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownWebName", \
|
|
"display_name": "ITSI Drilldown Website Name", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownWebURL", \
|
|
"display_name": "ITSI Drilldown Website URL", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsi_instruction", \
|
|
"display_name": "ITSI Instruction", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
} \
|
|
]
|
|
throttling_group_by_fields = ["signature", "src", "subcomponent"]
|
|
mapping_field_options = []
|
|
severity_id_mapping = case(lower(vendor_severity)="critical", 6, lower(vendor_severity)="high", 5, lower(vendor_severity)="medium", 4, lower(vendor_severity)="low", 3, lower(vendor_severity)="normal", 2, lower(vendor_severity)="info", 1, lower(vendor_severity)="warning", 3, lower(vendor_severity)="ok", 2, lower(vendor_severity)="down", 6, lower(vendor_severity)="up", 2, 1=1, 1)
|
|
status_id_mapping =
|
|
|
|
[nagios]
|
|
title = Nagios Default Template
|
|
_key = nagios
|
|
data_source = nagios
|
|
mapping_fields = [ \
|
|
{ \
|
|
"name": "src", \
|
|
"display_name": "Source", \
|
|
"type": "source_field", \
|
|
"required": true, \
|
|
"default_value": "nagios", \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "src" \
|
|
}, \
|
|
{ \
|
|
"name": "signature", \
|
|
"display_name": "Signature", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"default_value": "default_nagios_signature", \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "eventname" \
|
|
}, \
|
|
{ \
|
|
"name": "vendor_severity", \
|
|
"display_name": "Vendor Severity", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"default_value": "OK", \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "status_code" \
|
|
}, \
|
|
{ \
|
|
"name": "title", \
|
|
"display_name": "Title", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"default_value": "default_title" \
|
|
}, \
|
|
{ \
|
|
"name": "owner", \
|
|
"display_name": "Owner", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"input_type": "conf", \
|
|
"default_selected_key": "unassigned", \
|
|
"default_value": "unassigned" \
|
|
}, \
|
|
{ \
|
|
"name": "status", \
|
|
"display_name": "Status", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"input_type": "conf", \
|
|
"default_selected_key": "1", \
|
|
"default_value": "1" \
|
|
}, \
|
|
{ \
|
|
"name": "subcomponent", \
|
|
"display_name": "Subcomponent", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "description", \
|
|
"display_name": "Description", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "body" \
|
|
}, \
|
|
{ \
|
|
"name": "app", \
|
|
"display_name": "App", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "app" \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownSearchName", \
|
|
"display_name": "ITSI Drilldown Search Name", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownSearch", \
|
|
"display_name": "ITSI Drilldown Search", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownEarliestOffset", \
|
|
"display_name": "ITSI Drilldown earliest offset", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"default_value": "-900" \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownLatestOffset", \
|
|
"display_name": "ITSI Drilldown latest offset", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"default_value": "900" \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownWebName", \
|
|
"display_name": "ITSI Drilldown Website Name", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownWebURL", \
|
|
"display_name": "ITSI Drilldown Website URL", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsi_instruction", \
|
|
"display_name": "ITSI Instruction", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
} \
|
|
]
|
|
throttling_group_by_fields = ["signature", "src", "subcomponent"]
|
|
mapping_field_options = []
|
|
severity_id_mapping = case(lower(vendor_severity)="critical", 6, lower(vendor_severity)="warning", 3, lower(vendor_severity)="ok", 2, lower(vendor_severity)="down", 6, lower(vendor_severity)="up", 2, 1=1, 1)
|
|
status_id_mapping =
|
|
|
|
[scom]
|
|
title = Microsoft SCOM Default Template
|
|
_key = scom
|
|
data_source = scom
|
|
mapping_fields = [ \
|
|
{ \
|
|
"name": "src", \
|
|
"display_name": "Source", \
|
|
"type": "source_field", \
|
|
"required": true, \
|
|
"default_value": "scom", \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "host" \
|
|
}, \
|
|
{ \
|
|
"name": "signature", \
|
|
"display_name": "Signature", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"default_value": "default_scom_signature", \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "name" \
|
|
}, \
|
|
{ \
|
|
"name": "vendor_severity", \
|
|
"display_name": "Vendor Severity", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"default_value": "informational", \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "vendor_severity" \
|
|
}, \
|
|
{ \
|
|
"name": "title", \
|
|
"display_name": "Title", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"default_value": "default_title" \
|
|
}, \
|
|
{ \
|
|
"name": "owner", \
|
|
"display_name": "Owner", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"input_type": "conf", \
|
|
"default_selected_key": "unassigned", \
|
|
"default_value": "unassigned" \
|
|
}, \
|
|
{ \
|
|
"name": "status", \
|
|
"display_name": "Status", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"input_type": "conf", \
|
|
"default_selected_key": "1", \
|
|
"default_value": "1" \
|
|
}, \
|
|
{ \
|
|
"name": "subcomponent", \
|
|
"display_name": "Subcomponent", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "description", \
|
|
"display_name": "Description", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "description" \
|
|
}, \
|
|
{ \
|
|
"name": "app", \
|
|
"display_name": "App", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownSearchName", \
|
|
"display_name": "ITSI Drilldown Search Name", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownSearch", \
|
|
"display_name": "ITSI Drilldown Search", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownEarliestOffset", \
|
|
"display_name": "ITSI Drilldown earliest offset", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"default_value": "-900" \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownLatestOffset", \
|
|
"display_name": "ITSI Drilldown latest offset", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"default_value": "900" \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownWebName", \
|
|
"display_name": "ITSI Drilldown Website Name", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownWebURL", \
|
|
"display_name": "ITSI Drilldown Website URL", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsi_instruction", \
|
|
"display_name": "ITSI Instruction", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
} \
|
|
]
|
|
throttling_group_by_fields = ["signature", "src", "subcomponent"]
|
|
mapping_field_options = []
|
|
severity_id_mapping = case(lower(vendor_severity)="critical", 6, lower(vendor_severity)="error", 5, lower(vendor_severity)="warning", 4, lower(vendor_severity)="informational", 1, 1=1, 1)
|
|
status_id_mapping =
|
|
|
|
[o11y]
|
|
title = O11y Default Template
|
|
_key = o11y
|
|
data_source = o11y
|
|
mapping_fields = [ \
|
|
{ \
|
|
"name": "src", \
|
|
"display_name": "Source", \
|
|
"type": "source_field", \
|
|
"required": true, \
|
|
"default_value": "o11y", \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "src" \
|
|
}, \
|
|
{ \
|
|
"name": "signature", \
|
|
"display_name": "Signature", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"default_value": "default_o11y_signature", \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "signature" \
|
|
}, \
|
|
{ \
|
|
"name": "vendor_severity", \
|
|
"display_name": "Vendor Severity", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"default_value": "OK", \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "vendor_severity" \
|
|
}, \
|
|
{ \
|
|
"name": "title", \
|
|
"display_name": "Title", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"default_value": "default_title", \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "signature" \
|
|
}, \
|
|
{ \
|
|
"name": "owner", \
|
|
"display_name": "Owner", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"input_type": "conf", \
|
|
"default_selected_key": "unassigned", \
|
|
"default_value": "unassigned" \
|
|
}, \
|
|
{ \
|
|
"name": "status", \
|
|
"display_name": "Status", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"input_type": "conf", \
|
|
"default_selected_key": "1", \
|
|
"default_value": "1" \
|
|
}, \
|
|
{ \
|
|
"name": "subcomponent", \
|
|
"display_name": "Subcomponent", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "description", \
|
|
"display_name": "Description", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "description" \
|
|
}, \
|
|
{ \
|
|
"name": "app", \
|
|
"display_name": "App", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "app" \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownSearchName", \
|
|
"display_name": "ITSI Drilldown Search Name", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownSearch", \
|
|
"display_name": "ITSI Drilldown Search", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownEarliestOffset", \
|
|
"display_name": "ITSI Drilldown earliest offset", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"default_value": "-900" \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownLatestOffset", \
|
|
"display_name": "ITSI Drilldown latest offset", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"default_value": "900" \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownWebName", \
|
|
"display_name": "ITSI Drilldown Website Name", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "itsiDrilldownWeb" \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownWebURL", \
|
|
"display_name": "ITSI Drilldown Website URL", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "itsiDrilldownURI" \
|
|
}, \
|
|
{ \
|
|
"name": "itsi_instruction", \
|
|
"display_name": "ITSI Instruction", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"input_type": "composition", \
|
|
"default_selected_field": "itsi_instruction" \
|
|
} \
|
|
]
|
|
throttling_group_by_fields = ["signature", "src", "subcomponent"]
|
|
mapping_field_options = []
|
|
severity_id_mapping = severity_id
|
|
status_id_mapping =
|
|
|
|
[solarwinds]
|
|
title = Solarwinds Default Template
|
|
_key = solarwinds
|
|
data_source = solarwinds
|
|
mapping_fields = [ \
|
|
{ \
|
|
"name": "src", \
|
|
"display_name": "Source", \
|
|
"type": "source_field", \
|
|
"required": true, \
|
|
"default_value": "solarwinds", \
|
|
"input_type": "regex", \
|
|
"regex": ".*\\\/\\\/(?<itsi_field_name>[^\\\/]*)", \
|
|
"regex_source": "Uri" \
|
|
}, \
|
|
{ \
|
|
"name": "signature", \
|
|
"display_name": "Signature", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"default_value": "default_solarwinds_signature", \
|
|
"input_type": "regex", \
|
|
"regex": "Component\\s+(?<itsi_field_name>\"[^\"]+\"|[\\w]+)", \
|
|
"regex_source": "Message" \
|
|
}, \
|
|
{ \
|
|
"name": "vendor_severity", \
|
|
"display_name": "Vendor Severity", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"default_value": "OK", \
|
|
"input_type": "regex", \
|
|
"regex": ".* is (?<itsi_field_name>\\w+)", \
|
|
"regex_source": "Message" \
|
|
}, \
|
|
{ \
|
|
"name": "title", \
|
|
"display_name": "Title", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"default_value": "default_title" \
|
|
}, \
|
|
{ \
|
|
"name": "owner", \
|
|
"display_name": "Owner", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"input_type": "conf", \
|
|
"default_selected_key": "unassigned", \
|
|
"default_value": "unassigned" \
|
|
}, \
|
|
{ \
|
|
"name": "status", \
|
|
"display_name": "Status", \
|
|
"type": "notable_event_field", \
|
|
"required": true, \
|
|
"input_type": "conf", \
|
|
"default_selected_key": "1", \
|
|
"default_value": "1" \
|
|
}, \
|
|
{ \
|
|
"name": "subcomponent", \
|
|
"display_name": "Subcomponent", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "description", \
|
|
"display_name": "Description", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"input_type": "composition", \
|
|
"default_selected_key": "description" \
|
|
}, \
|
|
{ \
|
|
"name": "app", \
|
|
"display_name": "App", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownSearchName", \
|
|
"display_name": "ITSI Drilldown Search Name", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownSearch", \
|
|
"display_name": "ITSI Drilldown Search", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownEarliestOffset", \
|
|
"display_name": "ITSI Drilldown earliest offset", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"default_value": "-900" \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownLatestOffset", \
|
|
"display_name": "ITSI Drilldown latest offset", \
|
|
"type": "notable_event_field", \
|
|
"required": false, \
|
|
"default_value": "900" \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownWebName", \
|
|
"display_name": "ITSI Drilldown Website Name", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsiDrilldownWebURL", \
|
|
"display_name": "ITSI Drilldown Website URL", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
}, \
|
|
{ \
|
|
"name": "itsi_instruction", \
|
|
"display_name": "ITSI Instruction", \
|
|
"type": "notable_event_field", \
|
|
"required": false \
|
|
} \
|
|
]
|
|
throttling_group_by_fields = ["signature", "src", "subcomponent"]
|
|
mapping_field_options = []
|
|
severity_id_mapping = case(lower(vendor_severity)="down", 6, lower(vendor_severity)="up", 2, lower(vendor_severity)="critical", 6, lower(vendor_severity)="warning", 3, 1=1, 1)
|
|
status_id_mapping =
|