Merge pull request #14755 from v-ramonas/v-ramonas/TrendMicro-CAS-update

Update CCF Data Connector

Author: hassanchawiche

…MicroCAS_CCF/TrendMicroCASConnector.json …F/TrendMicroCAS_ConnectorDefinition.jsonSolutions/Trend Micro Cloud App Security/Data Connectors/TrendMicroCAS_CCF/TrendMicroCASConnector.json renamed to Solutions/Trend Micro Cloud App Security/Data Connectors/TrendMicroCAS_CCF/TrendMicroCAS_ConnectorDefinition.json Solutions/Trend Micro Cloud App Security/Data Connectors/TrendMicroCAS_CCF/TrendMicroCASConnector.json renamed to Solutions/Trend Micro Cloud App Security/Data Connectors/TrendMicroCAS_CCF/TrendMicroCAS_ConnectorDefinition.json

@@ -10,29 +10,28 @@
       "title": "Trend Micro Cloud App Security (via Codeless Connector Framework)",
       "publisher": "Microsoft",
       "descriptionMarkdown": "The [Trend Micro Cloud App Security](https://www.trendmicro.com/en_be/business/products/user-protection/sps/email-and-collaboration/cloud-app-security.html) data connector provides the capability to retrieve security event logs of the services that Cloud App Security protects into Microsoft Sentinel through the SIEM API. The connector provides the ability to get events which helps to examine potential security risks, analyze your team's use of collaboration, diagnose configuration problems and more. It supports DCR-based [ingestion time transformations](https://docs.microsoft.com/azure/azure-monitor/logs/custom-logs-overview) that parse the received security event data into custom columns so that queries don't need to parse it again, thus resulting in better performance.",
-      "graphQueriesTableName": "TrendMicroCASV2",
       "graphQueries": [
         {
           "metricName": "Total security events received",
           "legend": "Trend Micro CAS Security Events",
-          "baseQuery": "TrendMicroCASV2"
+          "baseQuery": "TrendMicroCASV2_CL"
         },
         {
           "metricName": "Recent Events",
           "legend": "Recent Events",
-          "baseQuery": "TrendMicroCASV2 | where TimeGenerated > ago(24h)"
+          "baseQuery": "TrendMicroCASV2_CL | where TimeGenerated > ago(24h)"
         }
       ],
       "sampleQueries": [
         {
           "description": "Get sample of recent security events",
-          "query": "TrendMicroCASV2\n| take 20"
+          "query": "TrendMicroCASV2_CL\n| take 20"
         }
       ],
       "dataTypes": [
         {
-          "name": "TrendMicroCASV2",
-          "lastDataReceivedQuery": "TrendMicroCASV2\n| where TimeGenerated > ago(6h)\n| summarize Time = max(TimeGenerated)\n| where isnotempty(Time)"
+          "name": "TrendMicroCASV2_CL",
+          "lastDataReceivedQuery": "TrendMicroCASV2_CL\n| where TimeGenerated > ago(6h)\n| summarize Time = max(TimeGenerated)\n| where isnotempty(Time)"
         }
       ],
       "connectivityCriteria": [
@@ -42,7 +41,7 @@
         {
           "type": "IsConnectedQuery",
           "value": [
-            "TrendMicroCASV2 | where TimeGenerated > ago(7d) | take 1"
+            "TrendMicroCASV2_CL | where TimeGenerated > ago(7d) | take 1"
           ]
         }
       ],

…ta Connectors/TrendMicroCAS_CCF/DCR.json …TrendMicroCAS_CCF/TrendMicroCAS_DCR.jsonSolutions/Trend Micro Cloud App Security/Data Connectors/TrendMicroCAS_CCF/DCR.json renamed to Solutions/Trend Micro Cloud App Security/Data Connectors/TrendMicroCAS_CCF/TrendMicroCAS_DCR.json Solutions/Trend Micro Cloud App Security/Data Connectors/TrendMicroCAS_CCF/DCR.json renamed to Solutions/Trend Micro Cloud App Security/Data Connectors/TrendMicroCAS_CCF/TrendMicroCAS_DCR.json

@@ -18,7 +18,7 @@
       "queryWindowInMin": 10,
       "queryTimeFormat": "yyyy-MM-ddTHH:mm:ssZ",
       "retryCount": 3,
-      "timeoutInSeconds": 120,
+      "timeoutInSeconds": 30,
       "headers": {
         "Content-Type": "application/json",
         "Accept": "application/json"

…ors/TrendMicroCAS_CCF/PollingConfig.json …CAS_CCF/TrendMicroCAS_PollingConfig.jsonSolutions/Trend Micro Cloud App Security/Data Connectors/TrendMicroCAS_CCF/PollingConfig.json renamed to Solutions/Trend Micro Cloud App Security/Data Connectors/TrendMicroCAS_CCF/TrendMicroCAS_PollingConfig.json Solutions/Trend Micro Cloud App Security/Data Connectors/TrendMicroCAS_CCF/PollingConfig.json renamed to Solutions/Trend Micro Cloud App Security/Data Connectors/TrendMicroCAS_CCF/TrendMicroCAS_PollingConfig.json

@@ -23,7 +23,7 @@
   ],
   "Data Connectors": [
     "Data Connectors/TrendMicroCAS_API_FunctionApp.json",
-    "Data Connectors/TrendMicroCAS_CCF/TrendMicroCASConnector.json"
+    "Data Connectors/TrendMicroCAS_CCF/TrendMicroCAS_ConnectorDefinition.json"
   ],
   "Analytic Rules": [
     "Analytic Rules/TrendMicroCASDLPViolation.yaml",
@@ -38,7 +38,7 @@
     "Analytic Rules/TrendMicroCASVAOutbreak.yaml"
   ],
   "BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\Trend Micro Cloud App Security",
-  "Version": "3.1.1",
+  "Version": "3.1.2",
   "DataConnectorCCFVersion": "3.0.0",
   "Metadata": "SolutionMetadata.json",
   "TemplateSpec": false,