Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 13 additions & 6 deletions docs/reference/connectors-kibana/crowdstrike-action-type.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,10 +11,6 @@ applies_to:

# CrowdStrike connector [crowdstrike-action-type]

::::{warning}
This functionality is in technical preview and may be changed or removed in a future release. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features.
::::

The CrowdStrike connector communicates with CrowdStrike Management Console via REST API.

To use this connector, you must have authority to run {{endpoint-sec}} connectors, which is an **{{connectors-feature}}** sub-feature privilege. Refer to [{{kib}} privileges](docs-content://deploy-manage/users-roles/cluster-or-deployment-auth/kibana-privileges.md).
Expand All @@ -41,6 +37,17 @@ CrowdStrike client ID
Client secret
: The CrowdStrike API client secret to authenticate the client ID.

## Test connectors [crowdstrike-action-parameters]
## Test connectors [crowdstrike-action-configuration]

You can test connectors as you’re creating or editing the connector in {{kib}}. For example:

:::{image} ../images/crowdstrike-connector-test.png
:screenshot:
:alt: CrowdStrike connector test
:::

The CrowdStrike action has the following configuration properties:

Agent IDs
: Get details about one or more CrowdStrike agent IDs.

At this time, you cannot test the CrowdStrike connector.
13 changes: 8 additions & 5 deletions docs/reference/connectors-kibana/sentinelone-action-type.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,10 +11,6 @@ applies_to:

# SentinelOne connector [sentinelone-action-type]

::::{warning}
This functionality is in technical preview and may be changed or removed in a future release. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features.
::::

The SentinelOne connector communicates with SentinelOne Management Console via REST API.

To use this connector, you must have authority to run {{endpoint-sec}} connectors, which is an **{{connectors-feature}}** sub-feature privilege. Refer to [{{kib}} privileges](docs-content://deploy-manage/users-roles/cluster-or-deployment-auth/kibana-privileges.md).
Expand All @@ -40,4 +36,11 @@ URL

## Test connectors [sentinelone-action-parameters]

At this time, you cannot test the SentinelOne connector.
You can test connectors as you're creating or editing the connector in {{kib}}.
For example:

:::{image} ../images/sentinelone-connector-test.png
:alt: SentinelOne connector test
:screenshot:
:::

Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/reference/images/crowdstrike-connector.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified docs/reference/images/sentinelone-connector.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
38 changes: 38 additions & 0 deletions oas_docs/output/kibana.serverless.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -645,6 +645,8 @@ paths:
- $ref: '#/components/schemas/run_closeincident'
- $ref: '#/components/schemas/run_createalert'
- $ref: '#/components/schemas/run_fieldsbyissuetype'
- $ref: '#/components/schemas/run_getagentdetails'
- $ref: '#/components/schemas/run_getagents'
- $ref: '#/components/schemas/run_getchoices'
- $ref: '#/components/schemas/run_getfields'
- $ref: '#/components/schemas/run_getincident'
Expand Down Expand Up @@ -64545,6 +64547,42 @@ components:
type: string
description: The Jira issue type identifier.
example: 10024
run_getagentdetails:
title: The getAgentDetails subaction
type: object
required:
- subAction
- subActionParams
description: The `getAgentDetails` subaction for CrowdStrike connectors.
properties:
subAction:
type: string
description: The action to test.
enum:
- getAgentDetails
subActionParams:
type: object
description: The set of configuration properties for the action.
required:
- ids
properties:
ids:
type: array
description: An array of CrowdStrike agent identifiers.
items:
type: string
run_getagents:
title: The getAgents subaction
type: object
required:
- subAction
description: The `getAgents` subaction for SentinelOne connectors.
properties:
subAction:
type: string
description: The action to test.
enum:
- getAgents
run_getchoices:
title: The getChoices subaction
type: object
Expand Down
38 changes: 38 additions & 0 deletions oas_docs/output/kibana.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -691,6 +691,8 @@ paths:
- $ref: '#/components/schemas/run_closeincident'
- $ref: '#/components/schemas/run_createalert'
- $ref: '#/components/schemas/run_fieldsbyissuetype'
- $ref: '#/components/schemas/run_getagentdetails'
- $ref: '#/components/schemas/run_getagents'
- $ref: '#/components/schemas/run_getchoices'
- $ref: '#/components/schemas/run_getfields'
- $ref: '#/components/schemas/run_getincident'
Expand Down Expand Up @@ -71017,6 +71019,42 @@ components:
type: string
description: The Jira issue type identifier.
example: 10024
run_getagentdetails:
title: The getAgentDetails subaction
type: object
required:
- subAction
- subActionParams
description: The `getAgentDetails` subaction for CrowdStrike connectors.
properties:
subAction:
type: string
description: The action to test.
enum:
- getAgentDetails
subActionParams:
type: object
description: The set of configuration properties for the action.
required:
- ids
properties:
ids:
type: array
description: An array of CrowdStrike agent identifiers.
items:
type: string
run_getagents:
title: The getAgents subaction
type: object
required:
- subAction
description: The `getAgents` subaction for SentinelOne connectors.
properties:
subAction:
type: string
description: The action to test.
enum:
- getAgents
run_getchoices:
title: The getChoices subaction
type: object
Expand Down
2 changes: 2 additions & 0 deletions oas_docs/overlays/connectors.overlays.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -388,6 +388,8 @@ actions:
- $ref: '../../x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_closeincident.yaml'
- $ref: '../../x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_createalert.yaml'
- $ref: '../../x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_fieldsbyissuetype.yaml'
- $ref: '../../x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_getagentdetails.yaml'
- $ref: '../../x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_getagents.yaml'
- $ref: '../../x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_getchoices.yaml'
- $ref: '../../x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_getfields.yaml'
- $ref: '../../x-pack/platform/plugins/shared/actions/docs/openapi/components/schemas/run_getincident.yaml'
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
title: The getAgentDetails subaction
type: object
required:
- subAction
- subActionParams
description: The `getAgentDetails` subaction for CrowdStrike connectors.
properties:
subAction:
type: string
description: The action to test.
enum:
- getAgentDetails
subActionParams:
type: object
description: The set of configuration properties for the action.
required:
- ids
properties:
ids:
type: array
description: An array of CrowdStrike agent identifiers.
items:
type: string
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
title: The getAgents subaction
type: object
required:
- subAction
description: The `getAgents` subaction for SentinelOne connectors.
properties:
subAction:
type: string
description: The action to test.
enum:
- getAgents