-
Notifications
You must be signed in to change notification settings - Fork 1.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[SIEMINT-118] DDS: Trellix Endpoint Security: Crawler Integration v1.0.0 #18673
[SIEMINT-118] DDS: Trellix Endpoint Security: Crawler Integration v1.0.0 #18673
Conversation
trellix_endpoint_security/README.md
Outdated
#### Get Credentials of Trellix Endpoint Security | ||
|
||
1. Log in to the Trellix ePO Saas. | ||
2. Navigate to the **Trellix Developer Portal** using [this][2] link. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
2. Navigate to the **Trellix Developer Portal** using [this][2] link. | |
2. Navigate to the **[Trellix Developer Portal][2]**. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done.
trellix_endpoint_security/README.md
Outdated
- **Method Types**: Select **GET**. | ||
5. Click **Request** to submit the request. It typically takes 2-3 days to process. You will be notified once your credentials are ready. | ||
6. When your credentials are available, generate your Client credentials by clicking **Generate** under **Create Client Credentials**. | ||
7. Copy and securely store the API key from **Access Management**, along with the Client ID and Client Secret from **Create Client Credentials**. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
7. Copy and securely store the API key from **Access Management**, along with the Client ID and Client Secret from **Create Client Credentials**. | |
7. Copy and securely store the API key from **Access Management**, along with the Client ID and Client Secret, from **Create Client Credentials**. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done.
trellix_endpoint_security/README.md
Outdated
!!! Add steps to validate integration is functioning as expected !!! | ||
Configure the Datadog endpoint to forward Trellix Endpoint Security logs to Datadog. | ||
|
||
1. Navigate to `Trellix Endpoint Security`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
1. Navigate to `Trellix Endpoint Security`. | |
1. Navigate to **Trellix Endpoint Security**. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done.
@jnhunsberger looks like this one just needs product sign-off |
4ddddb6
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Need to update dashboard layout per my comment.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This dashboard does not align with our design standards. Please update to include the product and company logo and adjust layout accordingly.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hi @jnhunsberger, To better showcase more of our use cases in the image, we’ve removed the product logo and description widgets from the dashboard. However, the product logo and description are still available in the dashboard as per Datadog standards, and everything remains the same from a code perspective.
Requested updates were made on Dec 19, dismissing this review.
…0.0 (#18673) * Add Trellix Endpoint Security integration with assets * Resolve CI failures * Update log pipeline sample * Update log pipeline sample * Resolve CI Failures * Update log pipeline * Update log pipeline * Update Dashboard * Update dashboard widget * Update readme and dashboard * Update screenshot * Address review comments * Update setup section of readme * Update setup section of README d196b77
What does this PR do?
This is a initial release PR of Trellix Endpoint Security integration including all the required assets.
Additional Notes
Review checklist (to be filled by reviewers)
qa/skip-qa
label if the PR doesn't need to be tested during QA.backport/<branch-name>
label to the PR and it will automatically open a backport PR once this one is merged