diff --git a/Solutions/RSAIDPlus_AdminLogs_Connector/Data/Solution_RSAIDPlus_AdminLogs_Connector.json b/Solutions/RSAIDPlus_AdminLogs_Connector/Data/Solution_RSAIDPlus_AdminLogs_Connector.json index 4dd6f69d4e..9721e40f58 100644 --- a/Solutions/RSAIDPlus_AdminLogs_Connector/Data/Solution_RSAIDPlus_AdminLogs_Connector.json +++ b/Solutions/RSAIDPlus_AdminLogs_Connector/Data/Solution_RSAIDPlus_AdminLogs_Connector.json @@ -13,7 +13,7 @@ "Playbooks/SendEmailOnRSAIDPlusAlert/azuredeploy.json" ], "BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\RSAIDPlus_AdminLogs_Connector", - "Version": "3.0.0", + "Version": "3.0.1", "Metadata": "SolutionMetadata.json", "TemplateSpec": true } \ No newline at end of file diff --git a/Solutions/RSAIDPlus_AdminLogs_Connector/Package/3.0.0.zip b/Solutions/RSAIDPlus_AdminLogs_Connector/Package/3.0.0.zip index 43fd7bce62..d4b4e4a5a8 100644 Binary files a/Solutions/RSAIDPlus_AdminLogs_Connector/Package/3.0.0.zip and b/Solutions/RSAIDPlus_AdminLogs_Connector/Package/3.0.0.zip differ diff --git a/Solutions/RSAIDPlus_AdminLogs_Connector/Package/mainTemplate.json b/Solutions/RSAIDPlus_AdminLogs_Connector/Package/mainTemplate.json index 00fef34259..434f6994a7 100644 --- a/Solutions/RSAIDPlus_AdminLogs_Connector/Package/mainTemplate.json +++ b/Solutions/RSAIDPlus_AdminLogs_Connector/Package/mainTemplate.json @@ -46,7 +46,7 @@ "variables": { "_solutionName": "RSAIDPlus_AdminLogs_Connector", "_solutionVersion": "3.0.0", - "solutionId": "rsasecurity1687281258544.azure-sentinel-solution-rsa_id_plus_admin_log_connector", + "solutionId": "rsasecurity1687281258544.azure-sentinel-solution-rsa_id_plus_admin_log", "_solutionId": "[variables('solutionId')]", "analyticRuleObject1": { "analyticRuleVersion1": "1.0.0", @@ -125,8 +125,8 @@ { "fieldMappings": [ { - "identifier": "Address", - "columnName": "sourceIPAddress" + "columnName": "sourceIPAddress", + "identifier": "Address" } ], "entityType": "IP" @@ -134,8 +134,8 @@ { "fieldMappings": [ { - "identifier": "Name", - "columnName": "adminUserName" + "columnName": "adminUserName", + "identifier": "Name" } ], "entityType": "Account" @@ -143,8 +143,8 @@ { "fieldMappings": [ { - "identifier": "HostName", - "columnName": "customerName" + "columnName": "customerName", + "identifier": "HostName" } ], "entityType": "Host" @@ -154,9 +154,9 @@ "aggregationKind": "SingleAlert" }, "customDetails": { - "Administrator_Type": "adminUserRole", "Customer_Name": "customerName", "Administrator": "adminUserName", + "Administrator_Type": "adminUserRole", "Activity": "activityKey" }, "alertDetailsOverride": { @@ -166,9 +166,9 @@ "incidentConfiguration": { "groupingConfiguration": { "reopenClosedIncident": false, + "lookbackDuration": "2h", "matchingMethod": "AllEntities", - "enabled": true, - "lookbackDuration": "2h" + "enabled": true }, "createIncident": true } @@ -1174,7 +1174,7 @@ "RSA ID Plus", "Email" ], - "lastUpdateTime": "2025-10-16T16:24:38.476Z", + "lastUpdateTime": "2025-10-23T02:04:08.746Z", "releaseNotes": { "version": "1.0", "title": "[variables('blanks')]", diff --git a/Solutions/RSAIDPlus_AdminLogs_Connector/ReleaseNotes.md b/Solutions/RSAIDPlus_AdminLogs_Connector/ReleaseNotes.md index 33dfa3ffaa..7ee765f67a 100644 --- a/Solutions/RSAIDPlus_AdminLogs_Connector/ReleaseNotes.md +++ b/Solutions/RSAIDPlus_AdminLogs_Connector/ReleaseNotes.md @@ -1,3 +1,4 @@ | **Version** | **Date Modified (DD-MM-YYYY)** | **Change History** | |-------------|--------------------------------|----------------------------------------| -| 3.0.0 | 14-10-2025 | Initial Solution Release. | \ No newline at end of file +| 3.0.1 | 23-10-2025 | Updating offerId | +| 3.0.0 | 14-10-2025 | Initial Solution Release. | \ No newline at end of file diff --git a/Solutions/RSAIDPlus_AdminLogs_Connector/SolutionMetadata.json b/Solutions/RSAIDPlus_AdminLogs_Connector/SolutionMetadata.json index 058524805b..572f11eeee 100644 --- a/Solutions/RSAIDPlus_AdminLogs_Connector/SolutionMetadata.json +++ b/Solutions/RSAIDPlus_AdminLogs_Connector/SolutionMetadata.json @@ -1,9 +1,9 @@ { "SolutionName": "RSA ID Plus Admin Logs Connector", "SolutionAuthor": "RSA Security", - "SolutionVersion": "3.0.0", + "SolutionVersion": "3.0.1", "publisherId": "rsasecurity1687281258544", - "offerId": "azure-sentinel-solution-rsa_id_plus_admin_log_connector", + "offerId": "azure-sentinel-solution-rsa_id_plus_admin_log", "firstPublishDate": "2025-10-14", "PackageIcon": "logo.swg", "providers": [