{
	"type": "Microsoft.SecurityInsights/dataConnectorDefinitions",
	"apiVersion": "2022-09-01-preview",
	"name": "ErmesBrowserSecurityEvents",
	"location": "{{location}}",
	"kind": "Customizable",
	"properties": {
		"connectorUiConfig": {
			"id": "ErmesBrowserSecurityEvents",
			"title": "Ermes Browser Security Events",
			"publisher": "Ermes Cyber Security S.p.A.",
			"descriptionMarkdown": "Ermes Browser Security Events",
			"graphQueriesTableName": "ErmesBrowserSecurityEvents_CL",
			"graphQueries": [
				{
					"metricName": "Total events received",
					"legend": "Ermes Events",
					"baseQuery": "{{graphQueriesTableName}}"
				}
			],
			"sampleQueries": [
				{
					"description": "Get Sample of Ermes Events",
					"query": "{{graphQueriesTableName}}\n | take 10"
				}
			],
			"dataTypes": [
				{
					"name": "{{graphQueriesTableName}}",
					"lastDataReceivedQuery": "{{graphQueriesTableName}}\n | where TimeGenerated > ago(12h) | where name_s == \"no data test\" | summarize Time = max(TimeGenerated)\n | where isnotempty(Time)"
				}
			],
			"connectivityCriteria": [
				{
					"type": "HasDataConnectors"
				}
			],
			"availability": {
				"isPreview": false
			},
			"permissions": {
				"resourceProvider": [
					{
						"provider": "Microsoft.OperationalInsights/workspaces",
						"permissionsDisplayText": "Read and Write permissions are required.",
						"providerDisplayName": "Workspace",
						"scope": "Workspace",
						"requiredPermissions": {
							"write": true,
							"read": true,
							"delete": true
						}
					},
					{
						"provider": "Microsoft.OperationalInsights/workspaces/sharedKeys",
						"permissionsDisplayText": "Read permissions to shared keys for the workspace are required. [See the documentation to learn more about workspace keys](https://docs.microsoft.com/azure/azure-monitor/platform/agent-windows#obtain-workspace-id-and-key)",
						"providerDisplayName": "Keys",
						"scope": "Workspace",
						"requiredPermissions": {
							"action": true
						}
					}
				],
				"customs": [
					{
						"name": "Ermes Client Id and Client Secret",
						"description": "Enable API access in Ermes. Please contact [Ermes Cyber Security](https://www.ermes.company) support for more information."
					}
				]
			},
			"instructionSteps": [
				{
					"description": "Connect using OAuth2 credentials",
					"instructions": [
						{
							"type": "Textbox",
							"parameters": {
								"label": "API URL (optional)",
								"placeholder": "https://api.shield.ermessecurity.com",
								"type": "text",
								"name": "apiUrl",
								"validations": {
									"required": false
								}
							}
						},
						{
							"type": "OAuthForm",
							"parameters": {
								"clientIdLabel": "Client ID",
								"clientSecretLabel": "Client Secret",
								"connectButtonLabel": "Connect",
								"disconnectButtonLabel": "Disconnect"
							}
						}
					],
					"title": "Connect Ermes Browser Security Events to Microsoft Sentinel"
				}
			]
		}
	}
}