Skip to content

Commit 19ac5ea

Browse files
JasonCongerJasonConger
committed
Update azureDeploy.portal.json
1 parent 7680df8 commit 19ac5ea

File tree

1 file changed

+52
-12
lines changed

1 file changed

+52
-12
lines changed

‎event-hubs-hec/deploy/azureDeploy.portal.json

Lines changed: 52 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
"version": "0.1.2-preview",
55
"parameters": {
66
"config": {
7-
"isWizard": true
7+
"isWizard": false
88
},
99
"basics": [
1010
{
@@ -84,7 +84,7 @@
8484
"name": "ehPolicyDropDown",
8585
"type": "Microsoft.Common.DropDown",
8686
"label": "Event Hub Access Policy",
87-
"toolTip": "Specify a policy with a 'Listen' claim.",
87+
"toolTip": "Specify a policy with a 'Listen' or greater claim.",
8888
"constraints": {
8989
"allowedValues": "[map(steps('appSettings').ehPolicyApi.value, (item) => parse(concat('{\"label\":\"', item.name, '\",\"value\":\"', item.name, '\"}')))]",
9090
"required": true
@@ -115,7 +115,7 @@
115115
{
116116
"name": "splunkHECEndpoint",
117117
"label": "Splunk HEC Endpoint",
118-
"toolTip": "URL for the Splunk HTTP Event Collector",
118+
"toolTip": "URL for the Splunk HTTP Event Collector.",
119119
"type": "Microsoft.Common.TextBox",
120120
"placeholder": "https://<YOUR SPLUNK URL>:<PORT>/services/collector/event",
121121
"constraints": {
@@ -125,7 +125,7 @@
125125
{
126126
"name": "splunkHECToken",
127127
"label": "Splunk HEC Token",
128-
"toolTip": "Splunk HTTP Event Collector Token",
128+
"toolTip": "Splunk HTTP Event Collector Token.",
129129
"type": "Microsoft.Common.TextBox",
130130
"constraints": {
131131
"required": true
@@ -142,7 +142,7 @@
142142
{
143143
"name": "repoURL",
144144
"label": "Repository URL",
145-
"toolTip": "URL for the function code",
145+
"toolTip": "URL for the function code.",
146146
"type": "Microsoft.Common.TextBox",
147147
"defaultValue": "https://github.com/splunk/azure-functions-splunk.git",
148148
"constraints": {
@@ -161,7 +161,7 @@
161161
{
162162
"name": "repoProject",
163163
"label": "Project",
164-
"toolTip": "If the source code for the function resides in a subdirectory, specify the subdirctory containing the code.",
164+
"toolTip": "If the source code for the function resides in a subdirectory, specify the subdirectory containing the code.",
165165
"type": "Microsoft.Common.TextBox",
166166
"defaultValue": "event-hubs-hec"
167167
}
@@ -212,7 +212,7 @@
212212
{
213213
"name": "ehActivitySourcetype",
214214
"label": "Activity Log Sourcetype",
215-
"toolTip": "Splunk sourcetype for activity logs",
215+
"toolTip": "Splunk sourcetype for activity logs.",
216216
"type": "Microsoft.Common.TextBox",
217217
"defaultValue": "azure:activity:log",
218218
"placeholder": "azure:activity:log",
@@ -269,15 +269,25 @@
269269
},
270270
{
271271
"name": "ehAADSASourcetype",
272-
"label": "AAD Sign-in and Audit Sourcetype",
273-
"toolTip": "Splunk sourcetype for Azure AD sign-in and activity data.",
272+
"label": "AAD Sign-in and Audit Sourcetype Base",
273+
"toolTip": "Splunk sourcetype base for Azure AD sign-in and activity data.",
274274
"type": "Microsoft.Common.TextBox",
275275
"defaultValue": "azure:aad",
276276
"placeholder": "azure:aad",
277277
"constraints": {
278278
"required": "[steps('ehAADLogs').ehAADSASection.ehAADSAEnable]"
279279
},
280280
"visible": "[steps('ehAADLogs').ehAADSASection.ehAADSAEnable]"
281+
},
282+
{
283+
"name": "ehAADSASourcetypeInfo",
284+
"type": "Microsoft.Common.InfoBox",
285+
"visible": "[steps('ehAADLogs').ehAADSASection.ehAADSAEnable]",
286+
"options": {
287+
"icon": "Info",
288+
"text": "The base sourcetype will be combined with the event category to construct the full Splunk sourcetype.",
289+
"uri": "https://github.com/splunk/azure-functions-splunk/tree/event-hubs/event-hubs-hec#splunk-sourcetypes"
290+
}
281291
}
282292
]
283293
},
@@ -332,6 +342,16 @@
332342
"required": "[steps('ehAADLogs').ehAADNISection.ehAADNIEnable]"
333343
},
334344
"visible": "[steps('ehAADLogs').ehAADNISection.ehAADNIEnable]"
345+
},
346+
{
347+
"name": "ehAADNISourcetypeInfo",
348+
"type": "Microsoft.Common.InfoBox",
349+
"visible": "[steps('ehAADLogs').ehAADNISection.ehAADNIEnable]",
350+
"options": {
351+
"icon": "Info",
352+
"text": "The base sourcetype will be combined with the event category to construct the full Splunk sourcetype.",
353+
"uri": "https://github.com/splunk/azure-functions-splunk/tree/event-hubs/event-hubs-hec#splunk-sourcetypes"
354+
}
335355
}
336356
]
337357
},
@@ -386,6 +406,16 @@
386406
"required": "[steps('ehAADLogs').ehAADSPSection.ehAADSPEnable]"
387407
},
388408
"visible": "[steps('ehAADLogs').ehAADSPSection.ehAADSPEnable]"
409+
},
410+
{
411+
"name": "ehAADSPSourcetypeInfo",
412+
"type": "Microsoft.Common.InfoBox",
413+
"visible": "[steps('ehAADLogs').ehAADSPSection.ehAADSPEnable]",
414+
"options": {
415+
"icon": "Info",
416+
"text": "The base sourcetype will be combined with the event category to construct the full Splunk sourcetype.",
417+
"uri": "https://github.com/splunk/azure-functions-splunk/tree/event-hubs/event-hubs-hec#splunk-sourcetypes"
418+
}
389419
}
390420
]
391421
}
@@ -432,15 +462,25 @@
432462
},
433463
{
434464
"name": "ehDiagnosticsSourcetype",
435-
"label": "Diagnostics Log Sourcetype",
436-
"toolTip": "Splunk sourcetype for diagnostics logs",
465+
"label": "Diagnostics Log Default Sourcetype",
466+
"toolTip": "Splunk default sourcetype for diagnostics logs.",
437467
"type": "Microsoft.Common.TextBox",
438468
"defaultValue": "azure:diagnostics",
439469
"placeholder": "azure:diagnostics",
440470
"constraints": {
441471
"required": "[steps('ehDiagnosticsLogs').ehDiagnosticsEnable]"
442472
},
443473
"visible": "[steps('ehDiagnosticsLogs').ehDiagnosticsEnable]"
474+
},
475+
{
476+
"name": "ehDiagnosticsSourcetypeInfo",
477+
"type": "Microsoft.Common.InfoBox",
478+
"visible": "[steps('ehDiagnosticsLogs').ehDiagnosticsEnable]",
479+
"options": {
480+
"icon": "Info",
481+
"text": "The function code will attempt to create a Splunk sourcetype based on the resourceId of the event. If a sourcetype cannot be constructed from the event, the specified default sourcetype entered will be used.",
482+
"uri": "https://github.com/splunk/azure-functions-splunk/tree/event-hubs/event-hubs-hec#splunk-sourcetypes"
483+
}
444484
}
445485
]
446486
},
@@ -486,7 +526,7 @@
486526
{
487527
"name": "ehMetricsSourcetype",
488528
"label": "Metrics Sourcetype",
489-
"toolTip": "Splunk sourcetype for metrics",
529+
"toolTip": "Splunk sourcetype for metrics.",
490530
"type": "Microsoft.Common.TextBox",
491531
"defaultValue": "azure:metrics",
492532
"placeholder": "azure:metrics",

0 commit comments

Comments
 (0)