integrations-core/hubspot_content_hub/assets/logs/hubspot-content-hub.yaml at 956cf7eb5b1f195a289e4ba28abadf2904dae6a5 · DataDog/integrations-core · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
# bypass-global-no-service-config-checks
id: hubspot-content-hub
metric_id: hubspot-content-hub
backend_only: false
facets:
  - groups:
      - Web Access
    name: User-Agent
    path: http.useragent
    source: log
  - groups:
      - Web Access
    name: Browser
    path: http.useragent_details.browser.family
    source: log
  - groups:
      - Web Access
    name: Device
    path: http.useragent_details.device.family
    source: log
  - groups:
      - Web Access
    name: OS
    path: http.useragent_details.os.family
    source: log
  - groups:
      - Geoip
    name: City Name
    path: network.client.geoip.city.name
    source: log
  - groups:
      - Geoip
    name: Continent Code
    path: network.client.geoip.continent.code
    source: log
  - groups:
      - Geoip
    name: Continent Name
    path: network.client.geoip.continent.name
    source: log
  - groups:
      - Geoip
    name: Country ISO Code
    path: network.client.geoip.country.iso_code
    source: log
  - groups:
      - Geoip
    name: Country Name
    path: network.client.geoip.country.name
    source: log
  - groups:
      - Geoip
    name: Subdivision ISO Code
    path: network.client.geoip.subdivision.iso_code
    source: log
  - groups:
      - Geoip
    name: Subdivision Name
    path: network.client.geoip.subdivision.name
    source: log
  - groups:
      - Web Access
    name: Client IP
    path: network.client.ip
    source: log
  - groups:
      - User
    name: User Email
    path: usr.email
    source: log
  - groups:
      - User
    name: User ID
    path: usr.id
    source: log
pipeline:
  type: pipeline
  name: HubSpot Content Hub
  enabled: true
  filter:
    query: "source:hubspot-content-hub"
  processors:
    - type: pipeline
      name: Audit Logs
      enabled: true
      filter:
        query: "service:audit"
      processors:
        - type: date-remapper
          name: Define `occurredAt` as the official date of the log
          enabled: true
          sources:
            - occurredAt
        - type: attribute-remapper
          name: Map `actingUser.userId` to `usr.id`
          enabled: true
          sources:
            - actingUser.userId
          sourceType: attribute
          target: usr.id
          targetType: attribute
          preserveSource: false
          overrideOnConflict: false
        - type: attribute-remapper
          name: Map `actingUser.userEmail` to `usr.email`
          enabled: true
          sources:
            - actingUser.userEmail
          sourceType: attribute
          target: usr.email
          targetType: attribute
          preserveSource: false
          overrideOnConflict: false
    - type: pipeline
      name: Login Logs
      enabled: true
      filter:
        query: "service:login"
      processors:
        - type: date-remapper
          name: Define `loginAt` as the official date of the log
          enabled: true
          sources:
            - loginAt
        - type: attribute-remapper
          name: Map `userId` to `usr.id`
          enabled: true
          sources:
            - userId
          sourceType: attribute
          target: usr.id
          targetType: attribute
          preserveSource: false
          overrideOnConflict: false
        - type: attribute-remapper
          name: Map `email` to `usr.email`
          enabled: true
          sources:
            - email
          sourceType: attribute
          target: usr.email
          targetType: attribute
          preserveSource: false
          overrideOnConflict: false
        - type: attribute-remapper
          name: Map `userAgent` to `http.useragent`
          enabled: true
          sources:
            - userAgent
          sourceType: attribute
          target: http.useragent
          targetType: attribute
          preserveSource: false
          overrideOnConflict: false
        - type: attribute-remapper
          name: Map `ipAddress` to `network.client.ip`
          enabled: true
          sources:
            - ipAddress
          sourceType: attribute
          target: network.client.ip
          targetType: attribute
          preserveSource: false
          overrideOnConflict: false
        - type: user-agent-parser
          name: Extract details from `http.useragent`
          enabled: true
          sources:
            - http.useragent
          target: http.useragent_details
          encoded: false
          combineVersionDetails: false
    - type: pipeline
      name: Security Logs
      enabled: true
      filter:
        query: "service:security"
      processors:
        - type: date-remapper
          name: Define `createdAt` as the official date of the log
          enabled: true
          sources:
            - createdAt
        - type: attribute-remapper
          name: Map `userId` to `usr.id`
          enabled: true
          sources:
            - userId
          sourceType: attribute
          target: usr.id
          targetType: attribute
          preserveSource: false
          overrideOnConflict: false
        - type: attribute-remapper
          name: Map `actingUser` to `usr.email`
          enabled: true
          sources:
            - actingUser
          sourceType: attribute
          target: usr.email
          targetType: attribute
          preserveSource: false
          overrideOnConflict: false
        - type: attribute-remapper
          name: Map `ipAddress` to `network.client.ip`
          enabled: true
          sources:
            - ipAddress
          sourceType: attribute
          target: network.client.ip
          targetType: attribute
          preserveSource: false
          overrideOnConflict: false
    - type: geo-ip-parser
      name: GeoIP Parser for `network.client.ip` (ipAddress)
      enabled: true
      sources:
        - network.client.ip
      target: network.client.geoip
      ip_processing_behavior: do-nothing