CyberArk Audit New CCF Data Connector

[nitsan-tzur]

Required items, please complete

Change(s):

• New Audit Service CCF data connector

Reason for Change(s):

• An alternative to Azure Functions based connector

Testing Completed:

• Yes

[v-maheshbh]

Hi @nitsan-tzur
Kindly attach the CCF connector screenshot in the connected state, and please share the invocation details and logs.

Thanks!

[nitsan-tzur]

Hi @v-maheshbh, attaching relevant screenshots of connected status and recent data fetch from target custom table

[v-maheshbh]

Hi @nitsan-tzur
Since the solution was originally implemented using an Azure Functions–based connector and now incorporates a CCF connector, the earlier Azure Function implementation is recommended to be deprecated.

Thanks!

[nitsan-tzur]

Hi @nitsan-tzur Since the solution was originally implemented using an Azure Functions–based connector and now incorporates a CCF connector, the earlier Azure Function implementation is recommended to be deprecated.

Thanks!

It was discussed and agreed with Microsoft team we've worked with on CCF to not deprecate the Azure Functions connector at this point

[v-maheshbh]

Hi @nitsan-tzur
Kindly repackage the solution, as the createUiDefinition file has not been updated to align with the analytical rule and the mainTemplate file.
As the last published version on the Content Hub is 3.0.2 while the current package has been built with version 3.1.0.

Thanks!

[nitsan-tzur]

Hi @nitsan-tzur Kindly repackage the solution, as the createUiDefinition file has not been updated to align with the analytical rule and the mainTemplate file. As the last published version on the Content Hub is 3.0.2 while the current package has been built with version 3.1.0.

Thanks!

Hi @v-maheshbh,
Edited createUiDefinition.json and zip package were updated

[v-maheshbh]

Hi @nitsan-tzur

The solution contains three analytical rules, which are not reflected here.
Kindly repackage the solution using the V3 tool:
https://github.com/Azure/Azure-Sentinel/blob/master/Tools/Create-Azure-Sentinel-Solution/V3/README.md

[nitsan-tzur]

Hi @nitsan-tzur

The solution contains three analytical rules, which are not reflected here. Kindly repackage the solution using the V3 tool: https://github.com/Azure/Azure-Sentinel/blob/master/Tools/Create-Azure-Sentinel-Solution/V3/README.md

Hi @v-maheshbh updated Analytic Rules in createUiDefinition.json

[v-maheshbh]

Hi @nitsan-tzur
The main template deployment is failing. Kindly review the configuration and address the underlying issue to ensure successful deployment.

Thanks!

[nitsan-tzur]

Hi @nitsan-tzur The main template deployment is failing. Kindly review the configuration and address the underlying issue to ensure successful deployment.

Thanks!

Hi @v-maheshbh please see screen shots of successful deployment with corresponding paramters.
I think you might have misconfigured the deployment parameters