84 строки
2.5 KiB
JSON
84 строки
2.5 KiB
JSON
{
|
|
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
|
|
"contentVersion": "1.0.0.0",
|
|
"parameters": {
|
|
"Workspace": {
|
|
"type": "string",
|
|
"metadata": {
|
|
"description": "The Microsoft Sentinel workspace into which the function will be deployed. Has to be in the selected Resource Group."
|
|
}
|
|
},
|
|
"WorkspaceRegion": {
|
|
"type": "string",
|
|
"defaultValue": "[resourceGroup().location]",
|
|
"metadata": {
|
|
"description": "The region of the selected workspace. The default value will use the Region selection above."
|
|
}
|
|
}
|
|
},
|
|
"variables": {},
|
|
"resources": [
|
|
{
|
|
"type": "Microsoft.Resources/deployments",
|
|
"apiVersion": "2020-10-01",
|
|
"name": "linkedASimEmptyView",
|
|
"properties": {
|
|
"mode": "Incremental",
|
|
"templateLink": {
|
|
"uri": "https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/ASIM/deploy/EmptyCustomUnifyingParsers/ASimEmptyView.json",
|
|
"contentVersion": "1.0.0.0"
|
|
},
|
|
"parameters": {
|
|
"Workspace": {
|
|
"value": "[parameters('Workspace')]"
|
|
},
|
|
"WorkspaceRegion": {
|
|
"value": "[parameters('WorkspaceRegion')]"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"type": "Microsoft.Resources/deployments",
|
|
"apiVersion": "2020-10-01",
|
|
"name": "linkedASim_WebSessionCustom",
|
|
"properties": {
|
|
"mode": "Incremental",
|
|
"templateLink": {
|
|
"uri": "https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/ASIM/deploy/EmptyCustomUnifyingParsers/ASim_WebSessionCustom.json",
|
|
"contentVersion": "1.0.0.0"
|
|
},
|
|
"parameters": {
|
|
"Workspace": {
|
|
"value": "[parameters('Workspace')]"
|
|
},
|
|
"WorkspaceRegion": {
|
|
"value": "[parameters('WorkspaceRegion')]"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"type": "Microsoft.Resources/deployments",
|
|
"apiVersion": "2020-10-01",
|
|
"name": "linkedIm_WebSessionCustom",
|
|
"properties": {
|
|
"mode": "Incremental",
|
|
"templateLink": {
|
|
"uri": "https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/ASIM/deploy/EmptyCustomUnifyingParsers/Im_WebSessionCustom.json",
|
|
"contentVersion": "1.0.0.0"
|
|
},
|
|
"parameters": {
|
|
"Workspace": {
|
|
"value": "[parameters('Workspace')]"
|
|
},
|
|
"WorkspaceRegion": {
|
|
"value": "[parameters('WorkspaceRegion')]"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
],
|
|
"outputs": {}
|
|
}
|