{
    "name": "DynatraceProblemsCCPDefinition",
    "apiVersion": "2022-09-01-preview",
    "type": "Microsoft.SecurityInsights/dataConnectorDefinitions",
    "location": "{{location}}",
    "kind": "Customizable",
    "properties": {
        "connectorUiConfig": {
            "id": "DynatraceProblemsCCPDefinition",
            "title": "Dynatrace Problems V2",
            "publisher": "Dynatrace",
            "descriptionMarkdown": "This connector uses the [Dynatrace Problem REST API](https://docs.dynatrace.com/docs/dynatrace-api/environment-api/problems-v2) to ingest problem events into Microsoft Sentinel Log Analytics",
            "additionalRequirementBanner": "This data connector depends on a parser based on Kusto Function to work as expected which is deployed with the Microsoft Sentinel Solution.",
            "graphQueriesTableName": "DynatraceProblemsV2_CL",
            "graphQueries": [
                {
                    "metricName": "Total data received",
                    "legend": "Dynatrace Problem Events",
                    "baseQuery": "{{graphQueriesTableName}}"
                }
            ],
            "sampleQueries": [
                {
                    "description": "All Problem Events",
                    "query": "DynatraceProblems\n| summarize  arg_max(StartTime, *) by ProblemId\n|  take 10"
                },
                {
                    "description": "All Open Problem Events",
                    "query": "DynatraceProblems\n| summarize  arg_max(EndTime, *) by ProblemId\n| where isnull(EndTime) or Status == \"OPEN\"\n|  take 10"
                },
                {
                    "description": "Error Problem Events",
                    "query": "DynatraceProblems\n| where SeverityLevel == \"ERROR\"\n| summarize  arg_max(StartTime, *) by ProblemId\n|  take 10"
                },
                {
                    "description": "Availability Problem Events",
                    "query": "DynatraceProblems\n| where SeverityLevel == \"AVAILABILITY\"\n| summarize  arg_max(StartTime, *) by ProblemId\n|  take 10"
                },
                {
                    "description": "Performance Problem Events",
                    "query": "DynatraceProblems\n| where SeverityLevel == \"PERFORMANCE\"\n| summarize  arg_max(StartTime, *) by ProblemId\n|  take 10"
                },
                {
                    "description": "Count Problem Events by impact level",
                    "query": "DynatraceProblems\n| summarize  arg_max(StartTime, *) by ProblemId\n| summarize count() by ImpactLevel\n| take 10"
                },
                {
                    "description": "Count Problem Events by severity level",
                    "query": "DynatraceProblems\n| summarize  arg_max(StartTime, *) by ProblemId\n| summarize count() by SeverityLevel\n| take 10"
                }
            ],
            "dataTypes": [
                {
                    "name": "{{graphQueriesTableName}}",
                    "lastDataReceivedQuery": "{{graphQueriesTableName}}\n            | summarize Time = max(TimeGenerated)\n            | where isnotempty(Time)"
                }
            ],
            "connectivityCriteria": [
                {
                    "type": "HasDataConnectors",
                    "value": null
                }
            ],
            "availability": {
                "status": 1,
                "isPreview": false
            },
            "permissions": {
                "resourceProvider": [
                    {
                        "provider": "Microsoft.OperationalInsights/workspaces",
                        "permissionsDisplayText": "read and write permissions are required.",
                        "providerDisplayName": "Workspace",
                        "scope": "Workspace",
                        "requiredPermissions": {
                            "write": true,
                            "read": true,
                            "delete": true
                        }
                    }
                ],
                "customs": [
                    {
                        "name": "Dynatrace tenant (ex. xyz.dynatrace.com)",
                        "description": "You need a valid Dynatrace Tenant, to learn more about the Dynatrace platform [Start your free trial](https://www.dynatrace.com/trial)."
                    },
                    {
                        "name": "Dynatrace Access Token",
                        "description": "You need a Dynatrace Access Token, the token should have ***Read problems*** (problems.read) scope."
                    }
                ]
            },
            "instructionSteps": [
                {
                    "title": "Dynatrace Problem Events to Microsoft Sentinel",
                    "description": "Follow [these instructions](https://docs.dynatrace.com/docs/shortlink/token#create-api-token) to generate an access token.",
                    "instructions": [
                        {
                            "parameters": {
                                "enable": "true",
                                "type": "text",
                                "label": "Dynatrace tenant (ex. xyz.dynatrace.com)",
                                "placeholder": "{{dynatraceEnvironmentUrl}}",
                                "name": "dynatraceEnvironmentUrl"
                            },
                            "type": "Textbox"
                        },
                        {
                            "parameters": {
                                "enable": "true",
                                "type": "password",
                                "label": "Dynatrace Access Token",
                                "placeholder": "{{dynatraceAccessToken}}",
                                "name": "dynatraceAccessToken"
                            },
                            "type": "Textbox"
                        },
                        {
                            "type": "ConnectionToggleButton",
                            "parameters": {
                                "connectLabel": "connect",
                                "name": "toggle"
                            }
                        }
                    ]
                }
            ],
            "metadata": {
                "version": "1.0.2",
                "kind": "dataConnector"
            }
        }
    }
}