{
    "name": "TropicoIncidentsDefinition",
    "apiVersion": "2022-09-01-preview",
    "type": "Microsoft.SecurityInsights/dataConnectorDefinitions",
    "location": "{{location}}",
    "kind": "Customizable",
    "properties": {
        "connectorUiConfig": {
            "id": "TropicoIncidentsDefinition",
            "title": "Tropico Security - Incidents",
            "publisher": "Tropico Security",
            "descriptionMarkdown": "Ingest attacker session incidents from Tropico Security Platform.",
            "graphQueriesTableName": "{{graphQueriesTableName}}",
            "graphQueries": [
                {
                    "metricName": "Total incidents received",
                    "legend": "Tropico Incidents",
                    "baseQuery": "{{graphQueriesTableName}}"
                }
            ],
            "sampleQueries": [
                {
                    "description": "All Tropico incidents",
                    "query": "{{graphQueriesTableName}}"
                }
            ],
            "dataTypes": [
                {
                    "name": "{{graphQueriesTableName}}",
                    "lastDataReceivedQuery": "{{graphQueriesTableName}}\n|summarize Time = max(TimeGenerated)\n|where isnotempty(Time)"
                }
            ],
            "connectivityCriteria": [
                {
                    "type": "HasDataConnectors"
                }
            ],
            "permissions": {
                "resourceProvider": [
                    {
                        "provider": "Microsoft.OperationalInsights/workspaces",
                        "permissionsDisplayText": "Read and write permissions required",
                        "providerDisplayName": "Workspace",
                        "scope": "Workspace",
                        "requiredPermissions": {
                            "write": true,
                            "read": true,
                            "delete": true
                        }
                    }
                ]
            },
            "instructionSteps": [
                {
                    "title": "Connect Tropico Security Platform",
                    "description": "Enter your read-only API key from Tropico Settings.",
                    "instructions": [
                        {
                            "type": "Textbox",
                            "parameters": {
                                "label": "API Key",
                                "placeholder": "trop_xxxx...",
                                "type": "password",
                                "name": "apikey"
                            }
                        },
                        {
                            "type": "ConnectionToggleButton",
                            "parameters": {
                                "connectLabel": "Connect",
                                "disconnectLabel": "Disconnect"
                            }
                        }
                    ]
                }
            ],
            "isConnectivityCriteriasMatchSome": false
        }
    },
    "dependsOn": null
}