From ce21b3381c8dbb05353a266901fad6a894b51857 Mon Sep 17 00:00:00 2001 From: Michael Date: Thu, 10 Oct 2024 15:05:33 +0300 Subject: [PATCH 1/5] Update legacy syslog connector definition --- .../Syslog/Data Connectors/template_Syslog.json | 14 ++++++-------- 1 file changed, 6 insertions(+), 8 deletions(-) diff --git a/Solutions/Syslog/Data Connectors/template_Syslog.json b/Solutions/Syslog/Data Connectors/template_Syslog.json index 72adbdf7134..e551d32b60f 100644 --- a/Solutions/Syslog/Data Connectors/template_Syslog.json +++ b/Solutions/Syslog/Data Connectors/template_Syslog.json @@ -1,9 +1,8 @@ { "id": "Syslog", - "title": "Syslog", + "title": "Syslog via Legacy Agent", "publisher": "Microsoft", - "descriptionMarkdown": "Syslog is an event logging protocol that is common to Linux. Applications will send messages that may be stored on the local machine or delivered to a Syslog collector. When the Agent for Linux is installed, it configures the local Syslog daemon to forward messages to the agent. The agent then sends the message to the workspace. For more information, see the [Microsoft Sentinel documentation](https://go.microsoft.com/fwlink/p/?linkid=2223807&wt.mc_id=sentinel_dataconnectordocs_content_cnl_csasci).", - "additionalRequirementBanner": "[Learn more](https://aka.ms/sysLogInfo)", + "descriptionMarkdown": "Syslog is an event logging protocol that is common to Linux. Applications will send messages that may be stored on the local machine or delivered to a Syslog collector. When the Agent for Linux is installed, it configures the local Syslog daemon to forward messages to the agent. The agent then sends the message to the workspace.\n\n[Learn more >](https://aka.ms/sysLogInfo)", "graphQueries": [ { "metricName": "Total data received", @@ -36,14 +35,13 @@ } ], "availability": { - "status": 1, - "isPreview": false + "status": 1 }, "permissions": { "resourceProvider": [ { "provider": "Microsoft.OperationalInsights/workspaces", - "permissionsDisplayText": "write permission is required.", + "permissionsDisplayText": "write permission.", "providerDisplayName": "Workspace", "scope": "Workspace", "requiredPermissions": { @@ -56,7 +54,7 @@ "instructionSteps": [ { "title": "1. Install and onboard the agent for Linux", - "description": "Typically, you should install the agent on a different computer from the one on which the logs are generated.\n\n> Syslog logs are collected only from **Linux** agents.", + "description": "You can collect Syslog events from your local machine by installing the agent on it. You can also collect Syslog generated on a different source by running the installation script below on the local machine, where the agent is installed.\n\n> Syslog logs are collected only from **Linux** agents.", "instructions": [ { "parameters": { @@ -105,4 +103,4 @@ ] } ] -} \ No newline at end of file +} From 867ecd81979b90275b42a619628a6e75319fbcb5 Mon Sep 17 00:00:00 2001 From: Michael Date: Thu, 10 Oct 2024 18:12:32 +0300 Subject: [PATCH 2/5] Add missing "isPreview" --- Solutions/Syslog/Data Connectors/template_Syslog.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Solutions/Syslog/Data Connectors/template_Syslog.json b/Solutions/Syslog/Data Connectors/template_Syslog.json index e551d32b60f..c27f2723d74 100644 --- a/Solutions/Syslog/Data Connectors/template_Syslog.json +++ b/Solutions/Syslog/Data Connectors/template_Syslog.json @@ -35,7 +35,8 @@ } ], "availability": { - "status": 1 + "status": 1, + "isPreview": false }, "permissions": { "resourceProvider": [ From 3df9664005d360342e35ba8e1c9c4bf2505063be Mon Sep 17 00:00:00 2001 From: v-prasadboke <117061676+v-prasadboke@users.noreply.github.com> Date: Mon, 4 Nov 2024 17:33:20 +0530 Subject: [PATCH 3/5] Update template_Syslog.json --- Solutions/Syslog/Data Connectors/template_Syslog.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Solutions/Syslog/Data Connectors/template_Syslog.json b/Solutions/Syslog/Data Connectors/template_Syslog.json index c27f2723d74..604a041b47c 100644 --- a/Solutions/Syslog/Data Connectors/template_Syslog.json +++ b/Solutions/Syslog/Data Connectors/template_Syslog.json @@ -42,7 +42,7 @@ "resourceProvider": [ { "provider": "Microsoft.OperationalInsights/workspaces", - "permissionsDisplayText": "write permission.", + "permissionsDisplayText": "write permission is required.", "providerDisplayName": "Workspace", "scope": "Workspace", "requiredPermissions": { From c06398cdf61cb5ae69837220f9a8a7b8a166baa2 Mon Sep 17 00:00:00 2001 From: PrasadBoke Date: Mon, 4 Nov 2024 18:05:45 +0530 Subject: [PATCH 4/5] Solution packaged --- Solutions/Syslog/Package/3.0.7.zip | Bin 0 -> 26637 bytes Solutions/Syslog/Package/mainTemplate.json | 329 ++++++++++----------- Solutions/Syslog/ReleaseNotes.md | 1 + 3 files changed, 165 insertions(+), 165 deletions(-) create mode 100644 Solutions/Syslog/Package/3.0.7.zip diff --git a/Solutions/Syslog/Package/3.0.7.zip b/Solutions/Syslog/Package/3.0.7.zip new file mode 100644 index 0000000000000000000000000000000000000000..8b8a91a502ce8e321c01a4ed839b31ecdf7ab857 GIT binary patch literal 26637 zcmZ^~bC4%Z&^0MHx^qR3NB-XH-HNWxL`~4rDi={TS>a((hU84lYAR|_D7tjt&~ZY=>&uO4q<&n z;UAazKSP=~_2lwmGd_q~3@xp!h~XkHq!V6$D2OpaV_!F=qbb!p0xZHd=jB~J6s?(3 zjoG&rgLLi&lO>F4VXaE3i^|o^k0*KG*DDSfdibAG?}^7lMtbumG---Q*f&aBb?9CP zR0`o)Lqd6S-&V<1c`?vogdz>@ka%O%n9`C@fO(TnB;L|4!SLg}%tibBSq{WU%JeYt z$p?nC(^g(SQ>Q4V&R#E*wRy5;iz1t?*s5aY=8DDO3+*jQ|IYqF;!O!13oD@gB!zE?+^^u)?P}1&ln%Q`;pUZP4M&6Dj8{IHB zMQyI~XM}okNfsT29oeK5JUO(1ck&jxmxH?6Q4kTU^=UWYCmb({oQGk(T4aA?q;BeR zno*x)u zg9=a~7WS@6!jhtuhG%rDunt1OU_%jiiIGqgKTUc|DgzCbaHSyONr=7bfKq+fv|4Ct zVF_beB-NP7nr3y*UE`GLloWMY^T%|wCgxd`4m(olT%Zj^zXcP6VbvpC|5yPIDEtE4 ztNy+kf?5FyK0cp&X=t3Hfh|T>lV%*=SP?g~qstfbK(*SnHfg0oWfFr2xY>*%xG#hdGNDev)R6WmI!HF=BCwXwpLWL9nSw^~ibg&{Mu{qS+u&#f5zz6c z@>}txms3ycbdtqS!v0SOIF7or@h>-9USsZ~=yrf>rxIv!%A{{=KF)A`t1A>cO3=$i zUu4m{4cVB~eHWMOaSiKz=Alh+M!tuDM}b z7GT!>{p#=YwvXQ&PZZP+GA+59S{kF8>CxVWk#N)5i=w7wr(#-W6>Vx5dU1VNsmJp+ z7021j&2wQFhVEd};^&AK7M0ruFZ7^cxElG{9jNc8pW2-3PcgD~=c$3QMt$0p@j3_X zn@Ny|hu3TNwjD8kc8y2ae2~Ng5O}^TI3?7$Oez1ES90n7mT!YI+M3 z%eW?08x`kz!ySAfSDFam2ETWUJ2MjQTdbl^KPp%A{E_|lMYXAGT!#$^d|;!na!QNKq+ z@W$am;i?z{hwDSer1Z!1hYFMCw*K)TV^&<$Kq;E?WNz*MeB4oi8PI< z*y7TuFDL}UM?U5hDP+cZ)6Blqq7%WW5fajX4FzDUhL<2^@Pbg0N6C0_UIcbt%p5%t zUj<@sEuuodVKK0e_WOdb%N%Q%E>nY?D|)^$JZXEU<<*JoqoV{+)s9u>BCpoV#TUgI zDCEp2cq1x!QxmQ)Hfo^nGQ?b$ZI8(mQJZN%^D2A@o#|1U=$P8C?7eK6IFo`@&7_uI{U;3%_^Q z6@EJ4j7d`~CO!$NVv;t-G<1s@QwRdbH((!`!^&`;`5=P&Nv@aCyXzn@p*klwOH_rESEE`;9 zncSDvqr}Z-ovJy?5Oz}+{Bp*;fo1em2^wN*3N#jBrj6n9h-}GM;(%TBA1|R+`V7Z8A-- zugwPM(9mb)8c*#_M!#p=0YmNt=s53dpiUnXAmSgqkzsPdQAg}d7!e3!4TpsT!~kZH zz+3Oep#`VtRe`{<<>Z+#cqWx$s>3jMbt}l1;5#R?EJcUd+A`=a8iOD8EI?xuVhMCL zSvR#@1=$CxrSOXE^ML@3ZK2y3UGFTm)iDWdRtB-$o zqZKsp|Kp zE~pN`C|_7u0ua=WB1kURV1#w8cxc|#@4{7eOa;3pfHSC^A{|W;=jlih4L18UpXUOs z7Szu_4b+JO(I(*wyS9Og8QmYJXf61tLlI1a-H?1Rju~x~BAbagjGNAL)ifJIB?iZy zFr6z*7{$(v6laY#aKId=QxLu2#J-R!h7rCwL`V{^&_Kfop>I}!KnG{99S%B=Z~(X2 z@ssGODtN%{wbV3d;{GT@hLW?<Q`S^$&El+13%1U)|w6K%QwS&IA%8}yh_?Jwdm3L?>}2#t`~0ebFa_Ae<{Wk%Ph zy>p8uEmOcPAw==7#D(O25;Vl^vdg*kKRB{5@9ha6wz*4RCwtH9c7ZxW_Iz7^^%%As z(c_kh_)=`PtSW~4v@&wT8(jd)3q!|q%;`dxC=x4QZp4>oKJ11Js3&zGH-@{&v7Rxk z#@7j*KU4q(eEsDBO-jlo+DzGEhsH4z8|IWm6N9lqfQO zve@mX_}VG(lOky``HAv#^a8_xM#P}KJ7fl#nh3^I?S~Gn3D8T>(;?P|fhI9oA(M8U zur5MRV)+BqI_~3hMR_5uKLksuG^!TYidpG@EXD``&4@1YLgu&o>-1cs82d5b@^2%hf-HntqQ~8!5m0EPUV@a7VdmqTM*e4Su z6&TorYxIqOBW<8k%MaQImLywcSmGDCc@ z&<%brQ$X+1nB)TwVD(QtSUVCBnVATgL`S{1BOE@samS2~GOU?IZj!sgz|CV2R90FF z$FzLJ&I*9{&BuJK#c#g;9;LtQMl(swUhBv|98BXeRA4MkRaWu!VR%98^Yd?xw?QIr zHs|kJx~BWu7qFiQ@YTKab?jN;DpO@UX%(y6R3-4ODwC#^q;z9#t#-ZNQHK+M3&;DB zzj~dJ5a3ri!${Zfd;hc`g8T^*?T?n$e_}18Sugh>Jv=ti@0W=;c2#@*kb`BTf-Sj! zDgMM7=s0D*8bmZlNA=NBu=r%G-?uC+?SJEr*LZ&H2BQrmnJbDoZT|_O`SY#t@ekx` z>%Ch^-}<0i+wpIZLMJOVIc0$j$DZiM+W|e%&d%nK!H04QSBqcWwN31uEfpiQ`n3WZ zRKL;So7Pys|58U<@`a=p^s^1)EsFT5WGas+tA)8+ovomsgucROwXVai%2a$Si| zfTSW4m-K>oOlLk5u2ozkTb0T$!mB&~#rcQ5K$9Nn7@)41h%=iXvQ)UM6MpN4KaYE0 z)T_akq@v81*Z46steR;y(1U=wyCpOYTtuPhmuS~*keO@>Z64+Xa#cB>_$nl_a z55CzU!Nh^|5`!~|50r88ss}t2jScKr2Bh|00wUO`cIP0;mx9Q79@h>f8FuSN-9oK+ z++53p&f-xDeqraZ%k5eJkTWJn;QvTgd7Coi>@wj_fkL;1mtph!c^VJ11()?D7?u8# zQ@&&5im)H)Ln{^+N|&6P_pS>iBZU>Jr0ob93nsxd`9MRI@^9&7TRRZ({PR%BO)sC) zG06}-UpWhG74vRJ5+4(s|Mn^P7#pnPeyCUq$r&2hBp?N~8zA@e0`|=1*z1K`|L|%| z@KP!WU46SHD(8dE&>2?;zQo~?HE)i$kb-5;uKb=OSt4+wI|rHPGa`@S$6gg^(f+}# z=xX7Uuow#@xRzppu=gz=`v>vlSLERAzF^9@o(!VpVx!VspD#AvVs&0eGd^R zd>kbR7r&<~pVQv7-4;Qm?p*tO-k*cNX|u%#>u^@0%JUYnmXLTFFNr^MDgwS7Rn*8v zC1tsgx>w*ujY|tq`E;E~7RdO2_rrc52AU^eZ{ko=Nhs=WyEp>1FpFH~2Q(eu1p%>> zgj@_hM=OP|(JjT8CrECgA=7?t2i}aI!?8xMR($=Ln9ISWFfm?(aT7_vC_3nzAG+8g zZR2*?VfwVF^)TD z1Rk)vUZOrPxd@H@nEU_Lm(?y>LvbtkgTdv@P`Lw-51|t?p;##W*HL%wd)P14;r*#>;%#mqYM!R{E=y? z0I@6NuZ7$!EI~qHe18a&D?iZUWen}-+7+r5|8lUI`XhQTuPAq@z~0Xfu%Zkk)ZTO0 zV3~|gPF=2=v_smZ`%KeWZMT7ymoR~J9s(F0NZPoAcb9jP zcf&6UClNMbP112*82c}MHV`uj2{8!?i^=%sd%%xD$kpfcVz_I`bvHSW$S#3T{maW+ z_Jw3q3oxG2X1#TQysq|gZsP07HHY<6v2?9k@PDhnRYW~GMBtH7O~sNeLQ@6aAiZ=lA;5CJzmx}U{G-65A>zG?&qRy^M7 z&!}XtNC@Yzl_@BtTfj=HiJY%x%qs}df`_g%+Y_w?Ao#fNu52``TIeA#bD{nCENhkt zt$wdm08b_4>aETS(X=?C$EvUNxu0NQ)%$g$z|YS3tK7dFRzhlfAYbBQu}XNZEm6oM_{CZXZPOVmXIZTANx#E1W_zO5*6 zVtFo8QyjcX-M=i=fNgaSuj1K2P1wJDsF^R{8bX-tJ0a<((_@QaM|06itmw_)$lvlp z#MpbNpw0_Y?pe=bD5{T-NGKF9@`dC3F#9Txbj*c)IrYYUQj%X zKZL#K&4lU{kWf-2Db0GiFt7O=p-y3}(qxkmJMJwdo2x%Ah?T(t`C-oO}g1? zJ*LMAdoSbc09ndaJfAmA#fc)}m>h3_`NUp|rjcG}9Me2#BJ%6|1_ri}C?4jqJ3P}a z-3|6T{f7`Iutp9LFi8`4wRhRUK;aQ_PFwnNPtq%9@PN@8)aV*?je*LDBZ&_j$4UG? z?JJA)EWyb7we+uS&KMk)@H^Xoprm{;IrJ|W?T;`=V#UIpOhCh&NKP5!SS0I=im2=A zZpG6g~U*&1>4y$Vl;#7a1ACfa`0z75MlId>B3cqPxru-bz9LtRHv9iu}zj(vn zDevI26?w=w`LZet{b!2{l^OL%Nj-LTyj>-=WDsIl!^lQNb$2Wf!%@`|EyXhPgze}! z2wB9%O>#+!6Kza+BRBLNO^48wr6W5?NSK|>U@n-gKdr#nrZ?UP_}D3~l?q+;z%3L&6=y7@E%H5EonSuO72>e|!jgx+iR>fT@6wXELo#Y*Kp z=yn8VQMa_pwm7=DAxt(dL~xh)?M0xOVqbu}#{EdShk(!jAs zxq9+%C^lC1|pa6CU0^TT(g*w*)H|9t#o)0^ZgWtFw;{{c8_;=m)| z^G03=*%YkKQzck_nX2BkQt|knt6sW$j`wsqt=_afHMv8vE>sHOK!oO6_hF3hfqY8^ zrSYDtf4U5h^)B^uh2kmPC{*XNUdeb~XbHyVD}wZvf94;*;1BKbk{lb~nc;nQzi&!s z@Mn{|#C6?B_5J{;Te-yyMy(9=|C}W5T(TnQ#LDZR`z57X{I3(jAJ%*_@_TA1*}PGE zv;jUhc)<2{#m*Hi*l2p;h07~3;tGq-jW4$yDIy5S{~DI~KJovCKr5}47jeKdswZGG zR0G|d9NZDAcP@C!YK9OtWPPZ^jmwMf;gXazV`x55;;<8$Kh8(joE{`6r&|$is-ZD> zpwM^ypxT>tADu-o*m`N^vDQ_ZUJh>(4mC7s0W!v|w^*N#N#;4ojL@LRs=LEuDko%N z=A=wSkK*qt)jC)lL(b3XN=3cn>KiO!Tr-Qebnq6xkK|_>79Qsli6Qr4J;gL$>?~Sz8f-!P%EXC_@Vit6skyO zk4-=$PY34B=A4-BDA`xycg^Hl3F>?V>HVHpYypdtBLgm1vSIaFA&-C`mJ}+j7z>#| zSe8GVKEqT*{&43npRgg5O;@48c9pdo{4fl+HM+?cK-ZrrEDM;2V8w^4mkv()_Nb0Q zUIiZVRhb?{CY8AF5~ap+&OS@pKH7Njgc{Cxdqa;2^p`Q`%LNbzU(tHVLAT_d7mx}v@W^Z2 zU(F!`YyPx;S@*n(sYbl2BU9d1*%^Ptlpr%C#78nLrCE{MA)2^ms&l0SV9-h-z;{C9 zqnS+E2C^a*M2oB?Yk^=A` zla-1UwW6tN0uaz&HVv^AqhU5M1G3e7ir!`{J=`2hhG@tj&7KB_t62vlI*Vka1Zn@y z?PPDc4-jd1bsv?RT9$UehdfnrGDICa{sH-{>>|d!Le*`>=fn3BJV_Nk@WfF!0v+nZW#*0NTwI$#1$$lwxf_v6s$6do~Lk! zVz5cJ+?u=!0DiZM{hEY?WP~9}rSLjB?rJ!xR5R6caBdx37Yoi7+M{CVT`j~CJ z`WrOq)cPgneA137D+u^K1z8W(c^GUA^Lgg8KA3RklEnPPkF#uc!2%EaZ|C%@FBp*X z7s{AHz?v~;WvN2pQomFA(Qe%M^bEB8%u%jMb~~lv;k`M9l8chJbOj0VaS>!+%2H#(y~`oGgjSc`UGib}4oLQ|*wLj}c^CY_0s zQ81B}=5fE5AZbkc_YDyK!kdx&b+x3J2+>L~ov)OT(}fRGvySa-q0$t@g5I~UPUK}N z!d~Jk=)8?}UbK|tQEe*&1~>C}%FGG?g}yluGc18G)`%iiH?`riQwI0;%4jwh^pLWE zl#V&Avss1@w*W5>F&-Ji=|?KSezfFN7{(r4{uaj`sTS0bZX@N8`J6uXoZ0p-EH{LR zs}Z2Z);PmA1F`UZj>4@cnK8TXNHs0lXlkkFeVgQktue_e9&fOE$4pQ4?8{eqF{6x%lI!6vr+i%*1EH(gH(Fn*mb9!9C#$?E zvyWkLx>;;eSp-YBz|q^$PP0T5unygf9=qW?j?!x2g)_BTN};K1JX`4k_?@__D>T~Yq)bil!^ zLvz3p^%_g;PojPkI^-|}dCh&mVXQNNHpq^QNsrx{2n48*_mQ1EWDl_`nO&0!wPTF} z#FnN*SI2*~gxQf6U>MGOd4R;HB^cu&WVPO1`q0D)}%K%K6!+(M^G|5EF6=t2`|pVrGGaL2)l`FXBW{) ztz^DL&N@?y&NX}?^G$-@U?tJ(ps|AYAZeG&`fZA0=#YDa@GL;MvIi$Pj0365D}U)vQM z43n5=I2Am4cO+fRZjL*E%n;KSueB`bc=6-d2>iVFl{OLZs~3ek%p5q5IH5 zSrPSh$3MnLLOUZe_<9H^Jl)!!JgYm=J$6s@reBS@Ekd>mZ)daD*zXA*knhwi6o$ffru1;`oauqyN*KsokF zl7)Py^+m-q);zb{IXGH77oOI9+?DZY^(X*l{19d^KLc@~kJf>uHD~Soy$b3gZ1ghY z%Z|M0lAth4n;_7s(Wn?Nhqs1 z(`=q;EbX4)ya?tN6uRq~j2m}GEx;T#T2K}U#7p%VGU9mjKJ=nec#XZo~Zj)T_Dj+)Ae6LiUdDX9g zF`QK_@Gs1K8P!VUnpo$1tPM?8C-FW%gX|6?=k(!)R7Su07@F%)Y zoAIQ9qWwsR8;WB5nx?o&tLGPDG{?g}nT8LK`IwAP_7z)|a6ZM_93?Fgq2C}+H6VcI zp_|y68$kP{Wj5VMfi+9@1s_Id%*893bz7tLrmS$GC{J|=G&AfjVq-53Ww&C13VAr$ z9YtYzv0p(bx3+5%SeNq46@-YVhrYyhUIYP4myJf;>r~Lghuw?rr)J@cd#Lev2=e2> zU!OM{bBn*?s7mHm>n&Xt_oEaa(broKENaVf=qh$%U8@H@bkU9`IMy8+uNbzTV>=q_ zCv8a+fv+592hWB_(csK}f{@ECF5d+zG&vB0wHbNqO=q2M=iV*mnfqLS_)uv^+Stm- zdiU$kmPS80%d6g(?qm%rU=XNl?^Z5UnuGPthvYP#%PX*S=? z+D2CH*f&Osd*hg3y7y{A!QlbfVRf^Z*d2-vn4Z7~|DjQ^U9_0=d%X~4L@Z+qzBrLQ zB#m!|bYaEnabm-p%*zB_d>QH#^X+1WY+Vm`vitaRdcq;jW&GH5h#iyDYwpz^B}DfO zyxYS>W&GWFN5_21R2g_)cL%ko$7$U=VRmH$%i+AcMkt*81aDw)KoUcw6%|kP_E@V* zxmBy&PGh42O&kS=F6LSDawlPR(kTn%LSZv(>kQ zTz$A{w^7R|fJy}_A%mxzB=-QpX?EB^MUUuY*_j$Q7JVv&;6ZH#Tg^P*^H{v?h_h!e z&h8MD`4dn+>91F+4Vk8-)>&a-StYE3mSxSumP!sEHCtT;(sjb@ z9W}2=S=pZCZL6n7S#To^Jlxs9s4dVl&t28evebQ6Zm4>X&&-DpUM2dTIuXUKu{+w6 z(opaRpbYlmEXz7^6kC>!&YM17A9re?n>Jp08JP9J*m*d_PCo<0HS56yX7C2WEcvWx z_(8OB@Gz_u`B6%}C3ehnAl`J#6BeK9E)zm}TC#EAg6y$3vo;*QYjB^#>?lWK-2@*~ z%zQv>FBv;?kHvD7k*wKK`wmlxLDUO$j07C`XLS4GviRO=US=EC&hV6Y8jcW>@% zCzEbWp-P#4Bh^vUj+0cuIGdEdM3r62;+lsO7qqdsC6-QD*x1kb$v;Q@Aj#ml6Gov7 zN|VT|2_bJ<-)PM2=VtgmC>3v34RId&F#(K?mN~DLnAyDJKkMxMK{5^c9f`V1xZO0d zc-{Lur6dok9REfo9-kKd1lSz61I3ZO+0&vF83w;87>iUSNh_{l=rP?n#vHV1JpUe3 zZoO&!)M@;$-q+tnP5CQu|oJC{EeY~ct3!cR%Bh5(Ob$av) zZ;xPtNRaQ>;gij8$siV~8O=_9*`WRglZsx9xx z?tpybLG3*BlK42SvK2~~1XSM{``hE|6w5GZRj3KmY}hgeR` zx4Enq??tWr4*i<#OTF+krz(Gr-ESV8`*seMC?=rdXh_Hp;KSIQf@a|22@b;(qSoJY zN`%?v$td8au zsp-(QVpQ+76b_y z4a)t!-yWYL?ad95KXB|m++@ZS(e92IwW{c}f{ytmk5~TC}xCTJe7?4H1TepD1>ARt<%{uipe8+nAN~fpvOQ5A^52 zb(6M?CgNbc7}iHS7&7WpVD_dcJM=M5jcJ<5n6beYfuU!vkBFGC8a}^&QQ~l??N{oX zt620+T)Y_QvZEMYF2qet;1fu|hK2Wnmm4*K(Bp|f6AC;&{97dr9((%LSqI{^I2c^+ zhKxyQzqcLh7~7Y2UxU3nV%0cUBI)@!muIRM2rFlx z(gBoDzx#}Tl{Vjxub|sm49}RMpy`xRlCa_?5)TkoDh#B`xytVeVnjM<2GFWjG-!El zI7mWY%aMqdRNQ1d(>D=TNtQY!me_DTjmH=?26YC=Kk>3eVioS!udP6!}-?e>+lY^C5m0 zYyw~yX42*H1qnH6lxKp#j+!plgjgv;zy!R>oEfge ze_08FR%$fVVT(1NrM(XH!`l%|B=h57+b-Im$iX25sS_~olZ43fx>{zoZWSJQ`(0&u z*s@I4kElf_AuZebbJdkKk+S*U)!$@&avQk+0mO3D{(bkQ3CD$J07XClrRFUB4)DRv z;@@H8ZGfvVE0~Tzp2bqCAVxCxB0^vf_qx}1Ok@zfJ^Ou)?;vU)${qW>1Ld{tCUA))u3#5H zWkg2)n=4CC2iK(MJkh%=t8*}V`qn|Y3xSh{hY}5{#fh~*_MYWVCF+ytW~HSf>WYc* z`7pMpPr<(|%|&4ZW%7PtP#H7&l}Q<7E2NUG(nhdO&;p0L9^I=tCd<# zZF7H+WEr+^{3HD1IYnCNE^rF6qhsfVa58yN3fzwuriMvRhFl;;;ODL84DK9qTM#HQ z*rW>(LWQ(rbUX)|eE=an5*uWWRUy|a`uR4OQ1)#q&f&qZa)wHIaF!ZyaM#RJ)&^&0 ziao@Jq*(|QSV%ln*&Ayhb-f|r;91uAna1PJ3+R4%I~l3i`Bn_#@I2A!!Tqf>;ijy2 z1c3Fz&b8%y^>qsCH%@<-w?!e1xVqc4#lXNQqnm4&ql_`}&u)tarJ}|_3O!g;bMmQE zRQ@#bH>fOKSew;Go(?-cTumfHxDpvLRC3q4ol@@4S1BZ=+NbAF8FTH~%1&}g0LCz< zWhb^>;y%!#?6FL`#aT4NfPjQ0==S9FuVt!P*g0U$qReP7Y?oa-K1fVeeSfl-D%>xz zPUAP4tRU1Zgp5j2#)OHWCV_?@Qkodgv%F5~EHml;Z>u#eh3L2C_Z0AOq6|@O(vb|O zwF>3uIj3sy#hH|#l!+-9N(ZZbnh?dl@wq5vmxD5ob-Xd)*06?Grr}dK^f=PS!!|y7-Jg_>x^X8F7&2ABE5o-8PQwBU~j!2H~qJV zHxvxZkUxQ)1gN0P4D_M+PW9p1+$5r@HtRi#*ZP`CWc=XHRwlGr=etPw*HeUNg2;Yyn?D)ku9!g3FE%n2#Fi+y<;Q+DuZg=zM z;lSGj@DA}*ZK_Sh@fvYso&oVIoH@N3Z}nJJn`3QJ&WY;i$?_xA)ic;zsi|L=Mk-O1 zGfhwaZM|3h+#wLbw&BmdGLxZ72Ia*%HNGYz)hV)tSl@HHk_=}QddpWuno7hq21AjZ z&FeCObUD?b|F)-2t@kN?z$Di1qe%Y>PA-wqtgoGLFWjU2Dyy7z0n{S6z*D>E;5x^0 zA#{lEC+I|r{QVletb@ccE1p!ax_HKG<6*vg?ESmuM0@k$K0Z9G_}<$GnXXHsQu<#2 z0_M_lCJbTtgXO_p@{SST5me_WS>Sd@)PAJu)a8{|oNXC)ynsl|1(JDM90pJlsiMVC zh4d`mwhf{XkH+cAxQuKI-1D@D^p^ET1(xMKIVR*pHYD8I-PKr!sy)LV^ILX;{IH0N z!!B|_c<%UtLk!%UJ*)yzFGo5x#-wc9uQsh2c5pk{TMMx9wj5_KBlIoneR(s7^c2^# zsPGcOT{C+Cb|G=-IqZu!QWN4yMP@2wGV*u4@)1T`v%#ZzoKfQ zmFP#TV92|BHIVN)HoTv1mZl(L#n@Jm21S6wvnBEk?x=_WS2JKH#$q9eepmwB$;WLc;D?i$+V#M%auUNtTjCN5~2Rblouw|p3 zlHJc5o~j&yxyGMXA>TVDkCiD+H>B=y`?(Tn2SgJbx3}iopk$!tmfLq_Q#MITM7gp! z^{=Yjo6B+`|B=$>!06pVli^+bK{mFB32$6?aRj5xpr^d2kfqKz4&1+iE&D0PGUblr ztgeC*c(ihw;rlm-2~jI>ctg;Qs*freQfjmd!Nf06x^~PGMh6jmq5z|U!6nYd z5Wz>+UvX8ZU8*v06IDFp7m)O85$w<4u^wTbSZW5+7+`$74Q~J_N%gSea>AJ|>WY=% z)Lm2E$jG8YN^8K4GIuV-0j;FrVN|ftQBUEhz^zAHDM2!V>+o<)dBA%?-TdK%d2U4C z$Kq&PRP~3sg~QE*)N#Ppw;;bws(?dZ>%_G~y~Ext|3~#>`m6TF$EU#f<)%gk@K(%Q z|Kt{5bU=F_-GN*18l5QYx`i%#;_@9X@ zsbi`xE_LpS5(WE>_TvDU)ApKs<(xyO?9ZtrQ*Mp7tCCEqgaOxI43QL#{ zpO``SsPXQ9yId}bkQvYx_$qK?tcpbdNhEi7RO%(3pZ0Yszq;)Kd3Dqu*SBx$g_~?d zmy0Ebrmeg9ERJv9?=NDjZYVrTVMt{g2bD8H@|sUhDrpbkr97Bg!48H4V#Etx4^kl{ zXQdF`DO#Nn-5S0lVtcVZ#;kY(=XqVGBVzFLR1tb~mP!HnF){h{Fra@ns6-fIV`4Qs z58=8;YNRsZy1ZKLV(4VR5hn-x=+OhZ!GBZc*!i}K*eJG&)IxM>n6?Hyw&>%SD8Kzi zwT6b}Rc-wcozQD#_3$YKT*e%1bHvm$#KawkTOJZ4?wAEy2eL7A?o$GrIrQWC`kG^f%h0+T zV97;~+Z#aARy&RCo;Q%wltQ>Yl>d26muL={{p4ad6T74HJyownSlcuLgZc$%m|-ZRfDC(weaOaL;w%Fzp6TX$ zp(slN`Xu;%BR=?Di;X?r+145x~Ux8DsQ@VuXGpvicXZUcPGpDb&i` z##!AlB-_2N;vVi&Rvi%dg4yES&eFIi-hh3i0EPel=~VE(in73jEt{p6|GOXCi*IHE z&#iTJ=aztM!ra= z0OC1SYB7x98|`lT?TLkyb9cf3JSC*(-^v=p?w)qIdO`M4*%NO`(nTwg)l9fB<@&Qf z%cHHotQ1ppakyI9%s{jlP#~ATd!R`&+nW(T+uRV~hzgjJmrp6cZOjmE&Q`XfV- zLCaL~;SA4gI%jBe3e-Tvz^hQ%xMw(goh=@)>G_u8;F|Fj*Kcl^YP!(7cD)tsdP5LQ z35m~ao=9G<1|V445U7f(tX>< z7o56{w#rsZ0SXW3T+HUhOb{+$D`PtVFtwcF`61MQ?sTNvrZ_NO0SP-pJNa*v%% z&O+z?eJ#9v#4No2VV{6R zeViEHiWpZ5Xvv!8UXlo=?ve;l_3xiN$3MQ?H#z7wp7f@l-@+%rax z6;*j(@o`TeGdFnU{mT&69K+w1voB@tA;cj&(2EC2Y(0PB5n4~}QsG5T3Fte--(YLu0A}Z^^I6(~=UhkZ{ z+r@cc^O8NnP+edxa)?=|oalG>d-o z(9iFYR79b#D0f5=@>k{f_tZ?g4jR5ky>+co2#=&m3(fRB1;p*k(cdVXuTg(@D*AY% z92chJxRs<@rv-yQU2&f(VcUohT50gdk`CD6809?Sf*GVNh=LyPKcENM(Or=AS2u5* zxuE}*+S?C!EHP44Zk`UPV1B81!WaO`Z$E*%f#{gY^6PJg`$c4U%fByW0T?c+akg!~9!aegMy0f)Z$U4hl{RJW z5FN;o`Q@jSfhRd{ZuW$b1jkr@`JqDmjk-}ENh(|ESQtUm&VK0upVw!$vE@Mh?CFj* zsQTw(J^%h*I}CNYebqk?M(bIilB~Z<)t~x&<^Kktq* z^{RgqHs2@9S=2%WBSb*=kpI6-b?Ryn=hCUdSxzv?wH^KkYz*dVt$WrYH}|$sK*ffUhi-<5Ztqke}#JP$?M_%_2FhAq1+4kNMtJ*qmDtK z56OS%_Z!rO?4d1G<1?}6pa`WzMVEKL8OmRb@8Ev16Yl`TK26|r%C%{GA7ng)MYmg_ za{yS|U!pxk|NnIM)lqRQLBCiC8iKn75+Jy{yGsb}?(QsZ!8f=|Z~}qF-CY(B?zXr) z3q0<<=R5EF_r0E;)73rI)pO2FpRTE@`E^q_Dz{hN_f15gDAUTu)N~ken^VYyXoph> zGq}9OBjmm9&y&00=)YQIG)-D$xJ*tO4NgIpqRe_5uKF9!fW5FOZ(n>b8uzK}^>;bJ z*CR~l{V|!qZMX?*Jv<{+e6LNoH`Z#Oi8Hu~a+$dUxCvWLgC6o6NhO&4+9qLN)ihg` zJgg;)hu$C9ZUD3w>=Vzd9zK=Qj@YN(qcCA##+P$7PrlpinaF5}vC?`vmrqXsIw5dP z z?4X`YWWVb2p0b$-TYrc>$0NGq=qey5_r)Wp!wqqmkY}Z~6vbyQc`}IDB_KEJideMY zxy`H9%E^RTXSSL7aA)R+r{*Qn4(6Rx*~y*~YZMi}pvtz*{g;bMU!uD|nGTi}vrpp$9I2S}w1 zC1#F#m3zNk?IO}}&(OiP-CqsuUOPX7zsS7*}s!g*f($BX9ksHFGTu7@eIV8xzkfWPr65+MP(Y*%-@ z7)E?}MN>OOPaok1^O%jEt}W3&@d}l-Vg^dsbDcRz+KyMpcs=%5G_d3ElJzudrDOA3G}MweKZB>-mj)UXd0bj_q2$VdVc2A}5y z(|0IX4{zixh~)`mRu*4m&wDWE&uZO0l6z|IT((l#%>k#jczO=hzZI7lG`zU~{%?T& z@9EwkhEcA#ZU<7Iq7LHR#lk`3qy29d=o%)rz67znLNQXCy;{*2+lSY=zL}!JO2^n| z-#l*bjt3(~b4nLzp#(Dy+q+M!B88DZt$RW<5Wck=Fe6f{c|VG$ikW&|dsSU?rpqU% zOedP}8Rn8x{qX#>=O8-faVKhZmtEaS&VX$^D|q}=aB(`l7Jm zm5G8g9%zsF9b!SWvIw_%%5Lk|jE|`x!5ZZtQY`F7gu9|0j6lqae1h}eh zYKY51BnPsTw~o?~HPf#4YAQr~z~n(_JWiht3x1f=<>l?Ho_o$ zQjTM<^%UaFskdO^CB1{{#5D`F**)?p(BL8Fnp~V5sx#ssTVMQH^VOTuvX`Mo(}Qaa z=H>f%c$Tg)Y=aXQ&Ukpw;>WjTd_26($4uK&Tq$JKqM68oMUi!wn``_ph(n)MQ{2>6 z4;{=~8E&y@qh;EHkkgs}KtsTZD&srh5Z?5*Ac1?pEGJytUEsV>^cJ;sRlgJ39;SM& z^ZW^f94oOcRvH*S;gf|Pbze;9&R$|gZbl20H?xn`x208>T#5J#6*B=}VL}WS845NQ zq}B|<{)+Gm{F$0GYpzT2TCZ?%0YTBSuLaMe@v|@$Kq4$5@8bjGotl8Ni5Eancf*WMI-jXsd?iVrgqN>pfeZ zfW1D?0)Z{qx%fQx%i^K0+f*+^r-o%|Wn36lL>cMq(-5ld*^!jJ?N7kL^PzY^9) zTBY5cHrj$^9R|InkAI2xgmt3>DH$%_5x7>1o1MD{JlLpJQsJ08WFi=SoXj}K9w?mL z&j+cL3uI)N3+rzIY5k+$_w!YeX)l?y541m7q}N+Ic@$9Xrxx4VQtj)yjxGJ^sc6Tm zy_MFgi`+hLbtJhvfp^g9v~2azJD2F!FrLrx&}Ck)jJ;$)hwsZ?uoH7T=OQ9Q;U42b z@$p{1i3L+0_w{|cshI? zNWsEqll^$WBf{=OKahz$V6oNgH%Kzkj-|7>@xzPjX-b|^2KacFv}DHoxj`qHL>x?b ze(i$*{-YW20-4A>?qcg^@Ei}~Vi5ri`ez>=GIifs5bgL;6;L4qGzW z`-LHs<@>3^e6_QSnf_eK-7M~nO}!o35Md&OR|gLi)crke5#4k^@!Ynq zh?<6&vKef)s)V%G;QPnhPzez}^#j3|_1buLCeM76Ru&hf z){|7not?xinyQa9LNZ*c5`b02@n=7mNN$s8_A$v97Kp*S$1yyqFC2nH+Ufm783fZ_ zj~BfFe+$M}zk$lIu>4CVjh?e-t|_Ex&yg{cp!I^O))CRhk~0{oE4; zA>SoNO6PbrD9vOKY4YNJRzyH($s??2kt_-u!r5(j`72n1o%;}V;<$>)ur@LZFwulx z7KuwCPEhy)N%@7c_@xm{+Q=nQt?L{#o`F)^;OpZu6x=LR?TO|wJ0}9 z#oi!&9279fWP3i8l(=;7WZ?L4_^AMLE{-22Nbww(&RQ^rJQ$znT9M9Fay54CyEvz3 zvi+_0tTcqHJ^9tiD&m2lE=fPKP-E%lRvn8b#PX-WsfD^HxbEEH;Z+R zs=^$yR=G+ugJ_2GF)kU`@u2#7ht52C%0tzIGY)z6wYhi3+KB+)1FmISk z27wO1BfmlrC5EPS`Shq$O&ZeO?w1>rKDKv5^E}p6glo#4VGZubM(rUN`(I6i zFpfb!&LF^M`=aleBL58Dtp8g%f_E0##$7vPun1s>zgP2ibRoh+Sm*($c{!q-DZW{* z0gji4@#gK^(P>p&qps{BuEZzJ+8LF9ZdORfE>=izax!mx9LCXSUcs|U`Wykb9hMM9 zy=#g7kREUL6S6j62s#Q|l+6+Y!5S^i4)j2f_qOC*5S=2LTa=Yo)J<4KY5}b1jKZ;+rtge1SEj{N8+-FYt|ZL80T}>P>g46 z*bn-|hO~i;+m30;>ABVLEQj@;#eSbQjJ*6-WWR+=Nf$M}k8qmTHbO*?6P_2yUZ8-I zu{$Q!5={#T_Tpq181Kn0)Q-a}k`$Cp8j(SmQAqh+s481e6%^?r*$x!1nP)AfrNvcM z_9#eyeP@CHeX51WPl?d45JhmEHn8j*h^;WZ!0@>P1ik!9-w+wd=2&ne-XM&dE?k4Dl8nda{VvjvYEZA+0)S99p=0%W8u z<1p*g2t?;i5N=-5(xfzxHq{06*V#Ibo*1{qXy`mpt{`>GvSsHzW4W5NqYN@5qVV|m zHZIS%cHnv4C{y0xf|`YkDwOCfgV#jmzN+fR zx0LA?F4J+$ZfzbKiEj^mysn`iW;k*02Wl2|3S}1sbZH#c>O9;$KGuw89_H{N z>esjXiBcuBsR_k!|EU|RSd5=j5^f6!@b^)CdEA9&c+Q;AUz}l-wHJvz$w z2{BBGiW9Z+nn`d3;vP=Y(Kdf{6R_e@1v8jwg!N458!+*4Sy8``5&KWwuG3rg@r}_( z!>2hvMYZC-UvOA8MXY4~b(|pvHof?*gi%jswa=E6mOvK9$;)Bg!ZX9hjJW1<5T~C= zdhRP&Xr{S&#Y7ZJL#2x_N2C`{Gv=PZc{~zgAAbi*qM#v@L96gXTbieSi@4;f&YOyE zP0i^yU@)0hW@+uZ)gScX(sh2?`1q%Rw|jNpc5UJJK?~y(ZZU z@w}u43$oIJ1PV)T0%756Y-zPa8nGaMspNA{vus1!w5c}<1(vN6&!^q&|H$4u#mU}- zSdgoxKBEz{t{kfrjIweWVI8QR)iSh8yEz|Iuqnd!_-rd7B&T$6Cm zOlc^m*34-i7QB~p*z=(b% z<}A2AZhx>yFSK;BD^Q%4pQ*2>J}BUQJ9|F2OC?^D4xCR`TJ$n41oN%eit;ge=WnSR z|IG0Ka`jVy<3e}7f$iD!;^1Kel0duC?TR0TZ}mOC!Bo`{c$vIbyzb5GOx+9Ec@w z*A(hmQp2YolK*G!B1wJ3Ac<_>^jleP4T|lpVgUD%%P3Nj)<77R*I&vuOH0%%-0>X8 zM?Ap}Of{4%2EG2h_{{9-(Z<1AkmKNPBBkGcX3B)-M~V6K&PZwarxreE#P22xo?ewm z?2~}L%>7;vk_A$PjS@K@xin5)PZP{cDfQSs%e=5c`OfFkaKJb0$s=Vw@=$`V6;a`I zs6scsO^kA1bm|0du~2SUhnl5y%q$B3^WNeCkc|;W8t7P}tUV_jpY4ygNWXkw2@^oa z?>7!Egwb6%K;`!{E&=`p`1AW22-aj|`(q~dTWFtHo;w!&xqW+VUo-$7dc~vOu-`Qv zTvxssGBe!RR?l7?ka&=AftH=yF(@Q6%#rzVYhU$iJ}l5Z`L@JF_S`_KharTh`Y)71 zFmME@T08h;PgiZQ%ws06t#-+6=?l;_T{LtY{$!Pn$e&)u8QHcy81tT1q-^#!k+2Cm zwaiOG)e7KD{xypycsR$v2r2VU@q$h-)Xp9LxA633gscheDW{Qa!(pgS;?~#y z*x>Ym{7HRVDMb31-NUh2v+s-t_DuV*7R4qptyFMNQiNW&sV9{xJq$?$_cD!6v+3(l zW)x{ki|*HPzoItpG7MP2Vi%UAFi!}$NzwkU2118z#jm*)O%eXdXEEc zg0ED6N#}WPSCJVptrKJO6yt!yu^%fkNonD!U_n#Qw3_dh{Tqzr4pir}bCej-fbG!x z%}3~U3vm;*QCNtyE8uxJH$X|dmz|#=jQ~~x?#QapJ6I+>c94#>jo1EQ{7Vgflz%POnGtyYE;aAR^+w5zgKP9KYi8M|jqA(QFzO9+0Ii2Yd zbx}uCf?t0AEzpQ|%;XEbjM9MV=#E@+mKgf{>~Pqsrzn~}Epkn>WLA33?+>v zGulY+c2(&p=SZ_)7XY_0I9F5XFGGM=)x)FHyPV%fE|2r zk9=3D6u@O~iaX$p#QxynE(aP*0ik_warEa4XhfO$9MjwaO#Pf|SL+B@Fm7)e0~@fT zZ#1#?q4LFZV>7Kqll-+APFI|wR*Oy!leU4h4N#JM{k15ST*HX;hqM2Kaizp%LZ|^> zN}2NTdkfGY3)|oqKww`=#VBw3S(S!%+M&aYRcaBfF-}z8~Dh{I@5Yp zmnx#M-NbH*RiyTOY3r92SI*V^Cc$1A(}q3WutZs_tLBlzkJ^zSo#pP8(a2rZi=5?; znj7|53uC)H^i0TDcw;9UhlAzVQse!L!*ruxaL4pMh4n}zQ3GhO10tx=HhVY9i|tuS z^?A2{Z9iY7au>^=agOTrPm{rOMt8R{JV2NwQr56Ml%zp(#VvZK;vqusJ5fy8gT}uj z*XT5DV9-0@HwLt7nTHjL3=b;PHjzS6;Up`I*M_Rsd6-&{?Y|h*EF{lHR|1DC2bUJJ zo1@S}G_{QDE-v`@8$uwR?Y$L+SLFd2^dMdYHZ>D(*5KWS5N{VG0~4;lf0=CwuHn8_ zIx~+ryr-Y28n4P_t3+I;(#4g#s@>}`urRS=P%%PBEuAr3gEDn*;9hw)0djGFf5zPS zh0@i}sH@mMFJQFQ%$gVU-j~!>jau9rfIz&$mHTu?@X99g$`B3XE3G!Dp0&iJs zrA16LXOP50(0dyuWI0nA(tE16%^=`nt}@|Sv18Hk5L-K|1aagBo=N?y;s zstDX7c*`(zUe0J;bWxN!54p40z@OJmapEuor_;liSpyOoP=SuG=@<2!=Fm)DN3ifoo#iOtW@R83576aFpYoGr+TZGa}@7h$quLZw{R@fPG5G*e+kDA!qL8) zl!o_`&VPp9qPD^esm1?o@Y?3l-a*BG=wS}c{GVQq0-FCZzhkQ(!Z)B%{;w9s*7$E% z?$}nzj`M=gb+`{bZ^S6X@V_B&uA=@OqTdPhA76O#|44k3|1T*ZY`aHujX;VmVUcty*P*PsAeYudrMaXg3(JT+L@Mt0!8*WFo{8*a8SaOi8nK1Saw*=3X3ksDPPF(=Z6 zvuZ}yZyRW-l~P;uCxJ&~%TPVFfF#4&ed;BApy$Yvw6g#dg-)i*PSmx6kR$3;sNL@| z8u9=|64VDMP`?<3>3TK*uS24HO=jPfyyniG&XxRp?;ga`MQ8lr($_yGYsP+-%&Nyg zH3NTG+z&QmvzjNe;T4y+Ic{avei!6cT+y@T4k>p?7n8YAW}G+~95Y^3B1{$P+V$=z zZkvM`Y6-x3iUSWXq55p|?)?4gJcX%{y~iuVMg?+dU+CzScXHN({dOtRPpzPI)V*Pc zA|~{0ISr$o?VWLl^e(y!zR_BrWZxymZA*gVIstxinn4eG!dUOdayB2ZccborC1H7^ zKx*nl|LVBAy-wXW%8FkobcGRnGYM&W_o00)Yn5@^?K6d^H<_>n*;$IS0Om<_vk`2afYYm-VI;h`D+s4T(licIbWrg8aO|MY| z{v6-hmYycPuK`}83*~z(f|9f90wrGj^&(Pu3n*y*Ndnu9iMw?>Eu3Qk@(?mdLO|j} zEQ=^2N2IUYfAr?E89Tl1W&+G6(ffnS!f~`)5K|QD4 zQ0B6%Ywsj%izk<{)AXDIhE8+cv=M9S_#~3uhvl9+dxeOXv3_6P<{^bW+V|N%)7IHt zlXf9?oEa$vW1Rxv)p~QGVkZpB;CY~@;Rzo1l1oAqvHjneOw@u40`4U#-32JIeJ!?@ zM$1}5{8*Hte1OjKO@pgi4?^jd&+>oy?W?YB&7(43>*}UKeh0Gy+UhWq*5vHD%B0kn zaMkn3eoB5(xlG90$9!42Tr@EM$lL)=P1W7m&X5#3b%g}sJ~X`%>|s9m4^6~Xf>FLJ zl;oaNJbF9Zc>i2+hzGv$c6r_he#-YL0&$s_cY8Z0)kB=?!KS}hL&bdMujZLf`tqw8S znOd#qvDMmlPBQ#F>&@ZU$!KBb}Avm zJX6?{GvzWR=_>o8&@!E@;@d>NWFoTN$m1vZnAzr2&49kXgR|}2mk){MrWpP{80AUx z0qgk6JJb358gACPEq$I5!i9xrS}Cp=?5q_DPaqIgG5Soa`6e-xX^IWJ@kM<*EgX@vkN}0!7ztrhx%&||itEs+sx4aX# z!r#If6E@VP2f*XXTj<7BFCA6SIHCs`j8N$%93AX(KWh~n>)QTnhnJenq z5b6c&P2d8YsO+>trZYUDg^z>@%82mrglaIZ)l(_>O6wtiph7mXSm4&|74q&= zb;nUm1fGR~chl?Cj?Q?8XSls%S-qRDLX;qCvm3l+9Abo zl`EMklK0P@eVv|KY?R0zxdz%IP7Kgxwt#PD29xfVHak13vb0d#JdBJ8F-mcpSi)2u z2qrcVp5P6P=H#7Wpx8b+w;Uz%j5bXU2_qL83iZxE04fVGrdG*qVP8TNrDzFtFdCHP z0Is$rGPPkF`6GV0OUaRq6As_^0yL#aMmoY(+WbDZ=l6O+_)}46a0pRe6}+ zrBUgnze9q%(=zf06~~h{V+gX8ldnw&6)W?yDzALPbL7+cc|jEp6-q4{%{6HE!Dy|} ztTISU>;P`-{BZ%=_46;&d}6UPgs-1j*Cy`!sT zu~n_AJhT5b@#$9?2BsvFao6X`P?iW7UI)bV1kEZXYWV4jROGStKbPg2Xp)oDEVtp~ zeQXh?x(XqPW+>4pl&E?3gES`gqOndCqe{S$A0=agv25{S_rV<7R30W1&K+jHDH4f5 zY^}1d=6uHKhBRD>nXg$Y^D#JlD463J6bnP~wFoh>eO-z+TwJQqWI>382qHFcbKiO+ z#G55+!y?;;)wY?k0iPXj_9FNqJEB=kJ)1fH#UaiJp|zz4PqVe^vIuslmLA5u3abwe zR$}eqzOfRjadRpX&~0aYFK(4LLslT^EaPlXB=DN#=*qdhpD@(GYM5*Ss9Rhv*e4=p z#F?E_Q`%Z`UMP-m_JHg>Ygg!NWriGQ=v;z8JG^$^xKw^1(sAq})Yu_&&1M8?=jHfN zXr`c3z=_+r9}ZLH?2*&oY3*=mP?uDr@VfZxL?i%It%rr;|ISa59(4y)D@AN}V!ei_ zV=%$seGz0lC0^ETY1s22(xDJLo9EzMJHo*N zYgI3D--2%nj4$d&pSV9KC($?^>Cldpznm`7s7cw9t>pG3`O)vE>~*)C1bHF0-#KN( zsTtO)cI3Vi-&FQ)B;M21tC?juqsWy?S;?5z;Zc!Ag=oseI^POThGtsToU|)_;+|x2xm(j$jw%-YKfpZ?YH;+J#(|TXm4R`C z4mtRJItMeGc2Te5FYmBn8$S+DHfsa3O1U4IVpq{=M^?SK)s^RGR`q#rM9$z(~JArK-ro!r{RG-%WG= zH^AyYo96saY6$v=`v2TQ=YJ3K4_52{zJY(RTK^|C1f9NNyZ%2Tx2nj$L;Obs+}qLj KR](https://aka.ms/sysLogInfo)", "graphQueries": [ { "metricName": "Total data received", @@ -281,7 +281,7 @@ "contentSchemaVersion": "3.0.0", "contentId": "[variables('_dataConnectorContentId1')]", "contentKind": "DataConnector", - "displayName": "Syslog", + "displayName": "Syslog via Legacy Agent", "contentProductId": "[variables('_dataConnectorcontentProductId1')]", "id": "[variables('_dataConnectorcontentProductId1')]", "version": "[variables('dataConnectorVersion1')]" @@ -325,9 +325,9 @@ "kind": "StaticUI", "properties": { "connectorUiConfig": { - "title": "Syslog", + "title": "Syslog via Legacy Agent", "publisher": "Microsoft", - "descriptionMarkdown": "Syslog is an event logging protocol that is common to Linux. Applications will send messages that may be stored on the local machine or delivered to a Syslog collector. When the Agent for Linux is installed, it configures the local Syslog daemon to forward messages to the agent. The agent then sends the message to the workspace. For more information, see the [Microsoft Sentinel documentation](https://go.microsoft.com/fwlink/p/?linkid=2223807&wt.mc_id=sentinel_dataconnectordocs_content_cnl_csasci).", + "descriptionMarkdown": "Syslog is an event logging protocol that is common to Linux. Applications will send messages that may be stored on the local machine or delivered to a Syslog collector. When the Agent for Linux is installed, it configures the local Syslog daemon to forward messages to the agent. The agent then sends the message to the workspace.\n\n[Learn more >](https://aka.ms/sysLogInfo)", "graphQueries": [ { "metricName": "Total data received", @@ -349,8 +349,7 @@ ] } ], - "id": "[variables('_uiConfigId1')]", - "additionalRequirementBanner": "[Learn more](https://aka.ms/sysLogInfo)" + "id": "[variables('_uiConfigId1')]" } } }, @@ -363,7 +362,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "Syslog data connector with template version 3.0.6", + "description": "Syslog data connector with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('dataConnectorVersion2')]", @@ -522,7 +521,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "LinuxMachines Workbook with template version 3.0.6", + "description": "LinuxMachines Workbook with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('workbookVersion1')]", @@ -610,7 +609,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "SyslogConnectorsOverviewWorkbook Workbook with template version 3.0.6", + "description": "SyslogConnectorsOverviewWorkbook Workbook with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('workbookVersion2')]", @@ -702,7 +701,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "FailedLogonAttempts_UnknownUser_AnalyticalRules Analytics Rule with template version 3.0.6", + "description": "FailedLogonAttempts_UnknownUser_AnalyticalRules Analytics Rule with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('analyticRuleObject1').analyticRuleVersion1]", @@ -730,16 +729,16 @@ "status": "Available", "requiredDataConnectors": [ { + "connectorId": "Syslog", "dataTypes": [ "Syslog" - ], - "connectorId": "Syslog" + ] }, { + "connectorId": "SyslogAma", "dataTypes": [ "Syslog" - ], - "connectorId": "SyslogAma" + ] } ], "tactics": [ @@ -750,22 +749,22 @@ ], "entityMappings": [ { + "entityType": "Host", "fieldMappings": [ { - "identifier": "FullName", - "columnName": "Computer" + "columnName": "Computer", + "identifier": "FullName" } - ], - "entityType": "Host" + ] }, { + "entityType": "IP", "fieldMappings": [ { - "identifier": "Address", - "columnName": "HostIP" + "columnName": "HostIP", + "identifier": "Address" } - ], - "entityType": "IP" + ] } ] } @@ -821,7 +820,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "NRT_squid_events_for_mining_pools_AnalyticalRules Analytics Rule with template version 3.0.6", + "description": "NRT_squid_events_for_mining_pools_AnalyticalRules Analytics Rule with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('analyticRuleObject2').analyticRuleVersion2]", @@ -845,16 +844,16 @@ "status": "Available", "requiredDataConnectors": [ { + "connectorId": "Syslog", "dataTypes": [ "Syslog" - ], - "connectorId": "Syslog" + ] }, { + "connectorId": "SyslogAma", "dataTypes": [ "Syslog" - ], - "connectorId": "SyslogAma" + ] } ], "tactics": [ @@ -865,31 +864,31 @@ ], "entityMappings": [ { + "entityType": "Account", "fieldMappings": [ { - "identifier": "FullName", - "columnName": "User" + "columnName": "User", + "identifier": "FullName" } - ], - "entityType": "Account" + ] }, { + "entityType": "IP", "fieldMappings": [ { - "identifier": "Address", - "columnName": "SourceIP" + "columnName": "SourceIP", + "identifier": "Address" } - ], - "entityType": "IP" + ] }, { + "entityType": "URL", "fieldMappings": [ { - "identifier": "Url", - "columnName": "URL" + "columnName": "URL", + "identifier": "Url" } - ], - "entityType": "URL" + ] } ] } @@ -945,7 +944,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "squid_cryptomining_pools_AnalyticalRules Analytics Rule with template version 3.0.6", + "description": "squid_cryptomining_pools_AnalyticalRules Analytics Rule with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('analyticRuleObject3').analyticRuleVersion3]", @@ -973,16 +972,16 @@ "status": "Available", "requiredDataConnectors": [ { + "connectorId": "Syslog", "dataTypes": [ "Syslog" - ], - "connectorId": "Syslog" + ] }, { + "connectorId": "SyslogAma", "dataTypes": [ "Syslog" - ], - "connectorId": "SyslogAma" + ] } ], "tactics": [ @@ -993,39 +992,39 @@ ], "entityMappings": [ { + "entityType": "Account", "fieldMappings": [ { - "identifier": "FullName", - "columnName": "User" + "columnName": "User", + "identifier": "FullName" }, { - "identifier": "Name", - "columnName": "AccountName" + "columnName": "AccountName", + "identifier": "Name" }, { - "identifier": "UPNSuffix", - "columnName": "AccountUPNSuffix" + "columnName": "AccountUPNSuffix", + "identifier": "UPNSuffix" } - ], - "entityType": "Account" + ] }, { + "entityType": "IP", "fieldMappings": [ { - "identifier": "Address", - "columnName": "SourceIP" + "columnName": "SourceIP", + "identifier": "Address" } - ], - "entityType": "IP" + ] }, { + "entityType": "URL", "fieldMappings": [ { - "identifier": "Url", - "columnName": "URL" + "columnName": "URL", + "identifier": "Url" } - ], - "entityType": "URL" + ] } ] } @@ -1081,7 +1080,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "squid_tor_proxies_AnalyticalRules Analytics Rule with template version 3.0.6", + "description": "squid_tor_proxies_AnalyticalRules Analytics Rule with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('analyticRuleObject4').analyticRuleVersion4]", @@ -1109,16 +1108,16 @@ "status": "Available", "requiredDataConnectors": [ { + "connectorId": "Syslog", "dataTypes": [ "Syslog" - ], - "connectorId": "Syslog" + ] }, { + "connectorId": "SyslogAma", "dataTypes": [ "Syslog" - ], - "connectorId": "SyslogAma" + ] } ], "tactics": [ @@ -1130,39 +1129,39 @@ ], "entityMappings": [ { + "entityType": "Account", "fieldMappings": [ { - "identifier": "FullName", - "columnName": "User" + "columnName": "User", + "identifier": "FullName" }, { - "identifier": "Name", - "columnName": "AccountName" + "columnName": "AccountName", + "identifier": "Name" }, { - "identifier": "UPNSuffix", - "columnName": "AccountUPNSuffix" + "columnName": "AccountUPNSuffix", + "identifier": "UPNSuffix" } - ], - "entityType": "Account" + ] }, { + "entityType": "IP", "fieldMappings": [ { - "identifier": "Address", - "columnName": "SourceIP" + "columnName": "SourceIP", + "identifier": "Address" } - ], - "entityType": "IP" + ] }, { + "entityType": "URL", "fieldMappings": [ { - "identifier": "Url", - "columnName": "URL" + "columnName": "URL", + "identifier": "Url" } - ], - "entityType": "URL" + ] } ] } @@ -1218,7 +1217,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "ssh_potentialBruteForce_AnalyticalRules Analytics Rule with template version 3.0.6", + "description": "ssh_potentialBruteForce_AnalyticalRules Analytics Rule with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('analyticRuleObject5').analyticRuleVersion5]", @@ -1246,16 +1245,16 @@ "status": "Available", "requiredDataConnectors": [ { + "connectorId": "Syslog", "dataTypes": [ "Syslog" - ], - "connectorId": "Syslog" + ] }, { + "connectorId": "SyslogAma", "dataTypes": [ "Syslog" - ], - "connectorId": "SyslogAma" + ] } ], "tactics": [ @@ -1266,40 +1265,40 @@ ], "entityMappings": [ { + "entityType": "Account", "fieldMappings": [ { - "identifier": "Name", - "columnName": "Account" + "columnName": "Account", + "identifier": "Name" } - ], - "entityType": "Account" + ] }, { + "entityType": "IP", "fieldMappings": [ { - "identifier": "Address", - "columnName": "IPAddress" + "columnName": "IPAddress", + "identifier": "Address" } - ], - "entityType": "IP" + ] }, { + "entityType": "Host", "fieldMappings": [ { - "identifier": "HostName", - "columnName": "HostName" + "columnName": "HostName", + "identifier": "HostName" } - ], - "entityType": "Host" + ] }, { + "entityType": "AzureResource", "fieldMappings": [ { - "identifier": "ResourceId", - "columnName": "ResourceId" + "columnName": "ResourceId", + "identifier": "ResourceId" } - ], - "entityType": "AzureResource" + ] } ] } @@ -1355,7 +1354,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "sftp_file_transfer_above_threshold_AnalyticalRules Analytics Rule with template version 3.0.6", + "description": "sftp_file_transfer_above_threshold_AnalyticalRules Analytics Rule with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('analyticRuleObject6').analyticRuleVersion6]", @@ -1383,16 +1382,16 @@ "status": "Available", "requiredDataConnectors": [ { + "connectorId": "Syslog", "dataTypes": [ "Syslog" - ], - "connectorId": "Syslog" + ] }, { + "connectorId": "SyslogAma", "dataTypes": [ "Syslog" - ], - "connectorId": "SyslogAma" + ] } ], "tactics": [ @@ -1403,49 +1402,49 @@ ], "entityMappings": [ { + "entityType": "Account", "fieldMappings": [ { - "identifier": "Name", - "columnName": "username" + "columnName": "username", + "identifier": "Name" } - ], - "entityType": "Account" + ] }, { + "entityType": "IP", "fieldMappings": [ { - "identifier": "Address", - "columnName": "src_ip" + "columnName": "src_ip", + "identifier": "Address" } - ], - "entityType": "IP" + ] }, { + "entityType": "Host", "fieldMappings": [ { - "identifier": "HostName", - "columnName": "Computer" + "columnName": "Computer", + "identifier": "HostName" } - ], - "entityType": "Host" + ] }, { + "entityType": "File", "fieldMappings": [ { - "identifier": "Name", - "columnName": "FileSample" + "columnName": "FileSample", + "identifier": "Name" } - ], - "entityType": "File" + ] } ], "customDetails": { - "FilesList": "fileslist", - "TransferCount": "count_distinct_filepath" + "TransferCount": "count_distinct_filepath", + "FilesList": "fileslist" }, "incidentConfiguration": { "groupingConfiguration": { - "matchingMethod": "Selected", + "enabled": true, "lookbackDuration": "5h", "groupByEntities": [ "Account", @@ -1509,7 +1508,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "sftp_file_transfer_folders_above_threshold_AnalyticalRules Analytics Rule with template version 3.0.6", + "description": "sftp_file_transfer_folders_above_threshold_AnalyticalRules Analytics Rule with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('analyticRuleObject7').analyticRuleVersion7]", @@ -1537,16 +1536,16 @@ "status": "Available", "requiredDataConnectors": [ { + "connectorId": "Syslog", "dataTypes": [ "Syslog" - ], - "connectorId": "Syslog" + ] }, { + "connectorId": "SyslogAma", "dataTypes": [ "Syslog" - ], - "connectorId": "SyslogAma" + ] } ], "tactics": [ @@ -1557,49 +1556,49 @@ ], "entityMappings": [ { + "entityType": "Account", "fieldMappings": [ { - "identifier": "Name", - "columnName": "username" + "columnName": "username", + "identifier": "Name" } - ], - "entityType": "Account" + ] }, { + "entityType": "IP", "fieldMappings": [ { - "identifier": "Address", - "columnName": "src_ip" + "columnName": "src_ip", + "identifier": "Address" } - ], - "entityType": "IP" + ] }, { + "entityType": "Host", "fieldMappings": [ { - "identifier": "HostName", - "columnName": "Computer" + "columnName": "Computer", + "identifier": "HostName" } - ], - "entityType": "Host" + ] }, { + "entityType": "File", "fieldMappings": [ { - "identifier": "Name", - "columnName": "DirSample" + "columnName": "DirSample", + "identifier": "Name" } - ], - "entityType": "File" + ] } ], "customDetails": { - "FilesList": "dirlist", - "TransferCount": "count_distinct_dirpath" + "TransferCount": "count_distinct_dirpath", + "FilesList": "dirlist" }, "incidentConfiguration": { "groupingConfiguration": { - "matchingMethod": "Selected", + "enabled": true, "lookbackDuration": "5h", "groupByEntities": [ "Account", @@ -1663,7 +1662,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "CryptoCurrencyMiners_HuntingQueries Hunting Query with template version 3.0.6", + "description": "CryptoCurrencyMiners_HuntingQueries Hunting Query with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('huntingQueryObject1').huntingQueryVersion1]", @@ -1748,7 +1747,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "SCXExecuteRunAsProviders_HuntingQueries Hunting Query with template version 3.0.6", + "description": "SCXExecuteRunAsProviders_HuntingQueries Hunting Query with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('huntingQueryObject2').huntingQueryVersion2]", @@ -1833,7 +1832,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "CryptoThreatActivity_HuntingQueries Hunting Query with template version 3.0.6", + "description": "CryptoThreatActivity_HuntingQueries Hunting Query with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('huntingQueryObject3').huntingQueryVersion3]", @@ -1918,7 +1917,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "RareProcess_ForLxHost_HuntingQueries Hunting Query with template version 3.0.6", + "description": "RareProcess_ForLxHost_HuntingQueries Hunting Query with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('huntingQueryObject4').huntingQueryVersion4]", @@ -2003,7 +2002,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "SchedTaskAggregation_HuntingQueries Hunting Query with template version 3.0.6", + "description": "SchedTaskAggregation_HuntingQueries Hunting Query with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('huntingQueryObject5').huntingQueryVersion5]", @@ -2088,7 +2087,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "SchedTaskEditViaCrontab_HuntingQueries Hunting Query with template version 3.0.6", + "description": "SchedTaskEditViaCrontab_HuntingQueries Hunting Query with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('huntingQueryObject6').huntingQueryVersion6]", @@ -2173,7 +2172,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "squid_abused_tlds_HuntingQueries Hunting Query with template version 3.0.6", + "description": "squid_abused_tlds_HuntingQueries Hunting Query with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('huntingQueryObject7').huntingQueryVersion7]", @@ -2258,7 +2257,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "squid_malformed_requests_HuntingQueries Hunting Query with template version 3.0.6", + "description": "squid_malformed_requests_HuntingQueries Hunting Query with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('huntingQueryObject8').huntingQueryVersion8]", @@ -2343,7 +2342,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "squid_volume_anomalies_HuntingQueries Hunting Query with template version 3.0.6", + "description": "squid_volume_anomalies_HuntingQueries Hunting Query with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('huntingQueryObject9').huntingQueryVersion9]", @@ -2428,7 +2427,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "SyslogConnectorsOverallStatus Data Parser with template version 3.0.6", + "description": "SyslogConnectorsOverallStatus Data Parser with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('parserObject1').parserVersion1]", @@ -2560,7 +2559,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "SyslogConnectorsEventVolumebyDeviceProduct Data Parser with template version 3.0.6", + "description": "SyslogConnectorsEventVolumebyDeviceProduct Data Parser with template version 3.0.7", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('parserObject2').parserVersion2]", @@ -2688,7 +2687,7 @@ "apiVersion": "2023-04-01-preview", "location": "[parameters('workspace-location')]", "properties": { - "version": "3.0.6", + "version": "3.0.7", "kind": "Solution", "contentSchemaVersion": "3.0.0", "displayName": "Syslog", diff --git a/Solutions/Syslog/ReleaseNotes.md b/Solutions/Syslog/ReleaseNotes.md index a070085aedd..1137f4b7e77 100644 --- a/Solutions/Syslog/ReleaseNotes.md +++ b/Solutions/Syslog/ReleaseNotes.md @@ -1,5 +1,6 @@ | **Version** | **Date Modified (DD-MM-YYYY)** | **Change History** | |-------------|--------------------------------|--------------------------------------------------------------------| +| 3.0.7 | 04-11-2024 | Updated the Syslog **Data Connector** template to latest version | | 3.0.6 | 01-08-2024 | Updated **Analytic rules** for entity mappings and parameter for parser function | | 3.0.5 | 16-07-2024 | Added 2 new Workspace Function **Parsers** and a new **Workbook** | | 3.0.4 | 27-06-2024 | Updated Connectivity criteria query for **Data Connector** | From c842d9d803bdf5913c16a3def04a0fe4a9cb1695 Mon Sep 17 00:00:00 2001 From: PrasadBoke Date: Mon, 4 Nov 2024 18:12:31 +0530 Subject: [PATCH 5/5] Create ReleaseNotes.md --- Solutions/ESET Protect Platform/ReleaseNotes.md | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 Solutions/ESET Protect Platform/ReleaseNotes.md diff --git a/Solutions/ESET Protect Platform/ReleaseNotes.md b/Solutions/ESET Protect Platform/ReleaseNotes.md new file mode 100644 index 00000000000..e5dd5cf78c4 --- /dev/null +++ b/Solutions/ESET Protect Platform/ReleaseNotes.md @@ -0,0 +1,3 @@ +| **Version** | **Date Modified (DD-MM-YYYY)** | **Change History** | +|-------------|--------------------------------|---------------------------------------------| +| 3.0.0 | 04-11-2024 | Initial Solution Release | \ No newline at end of file