azuresentineltarget

Documentation

Index

• func EnvAccessorCtor() pkgadapter.EnvConfigAccessor
• func NewTarget(ctx context.Context, envAcc pkgadapter.EnvConfigAccessor, ...) pkgadapter.Adapter
• type Incident
• type IncidentLabel
• type IncidentLabelType
• type IncidentOwnerInfo
• type IncidentStatus

Functions

func EnvAccessorCtor

func EnvAccessorCtor() pkgadapter.EnvConfigAccessor

EnvAccessorCtor for configuration parameters

func NewTarget

func NewTarget(ctx context.Context, envAcc pkgadapter.EnvConfigAccessor, ceClient cloudevents.Client) pkgadapter.Adapter

NewTarget adapter implementation

Types

type Incident

type Incident struct {
	Etag       string `json:"etag"`
	Properties struct {
		LastActivityTimeUtc  string            `json:"lastActivityTimeUtc"`
		FirstActivityTimeUtc string            `json:"firstActivityTimeUtc"`
		Labels               []IncidentLabel   `json:"labels"`
		Owner                IncidentOwnerInfo `json:"owner"`
		ProviderIncidentID   string            `json:"providerIncidentId"`
		Severity             string            `json:"severity"`
		Status               string            `json:"status"`
		Title                string            `json:"title"`
		Description          string            `json:"description"`
		AdditionalData       struct {
			AlertProductNames []string `json:"alertProductNames"`
		} `json:"additionalData"`
	} `json:"properties"`
}

Incident an Azure Sentinel incident.

type IncidentLabel

type IncidentLabel struct {
	LabelName string            `json:"labelName"`
	LabelType IncidentLabelType `json:"labelType"`
}

IncidentLabel is the label used to identify the incident in the Azure Sentinel

type IncidentLabelType

type IncidentLabelType []struct {
	Name string `json:"name"`
	Type string `json:"type"`
}

IncidentLabelType is the type of the label associated with an incident

type IncidentOwnerInfo

type IncidentOwnerInfo struct {
	// ObjectId string `json:"objectId"`
	AssignedTo string `json:"assignedTo"`
}

IncidentOwnerInfo is the owner information of an incident

type IncidentStatus

type IncidentStatus struct {
	Active string `json:"active"`
	Closed string `json:"closed"`
	New    string `json:"new"`
}

IncidentStatus an Azure Sentinel incident status object