Solution packaged

Azure · Jan 22, 2025 · 1bd418a · 1bd418a
1 parent 6c6d570
commit 1bd418a
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/Solutions/CTERA/Data Connectors/CTERA_Data_Connector.json b/Solutions/CTERA/Data Connectors/CTERA_Data_Connector.json
@@ -37,14 +37,14 @@
         {
             "type": "IsConnectedQuery",
             "value": [
-                "Syslog\n   | where TimeGenerated > ago(3d)\n   | where Message contains \"gw-audit[-]:\" or Message contains \"portal portal[-]:\"\n   | take 1\n   | project IsConnected = true"
+                "Syslog\n   | where TimeGenerated > ago(3d)\n   | where SyslogMessage contains \"gw-audit[-]:\" or Message contains \"portal portal[-]:\"\n   | take 1\n   | project IsConnected = true"
             ]
         }
     ],
     "dataTypes": [
         {
             "name": "Syslog (CTERA)",
-            "lastDataReceivedQuery": "Syslog\n   | where Message contains \"gw-audit[-]:\" or Message contains \"portal portal[-]:\"\n   | summarize Time = max(TimeGenerated)\n   | where isnotempty(Time)"
+            "lastDataReceivedQuery": "Syslog\n   | where SyslogMessage contains \"gw-audit[-]:\" or Message contains \"portal portal[-]:\"\n   | summarize Time = max(TimeGenerated)\n   | where isnotempty(Time)"
         }
     ], 
     "availability": {

diff --git a/Solutions/CTERA/Package/3.0.1.zip b/Solutions/CTERA/Package/3.0.1.zip
diff --git a/Solutions/CTERA/Package/mainTemplate.json b/Solutions/CTERA/Package/mainTemplate.json
@@ -182,14 +182,14 @@
                     {
                       "type": "IsConnectedQuery",
                       "value": [
-                        "Syslog\n   | where TimeGenerated > ago(3d)\n   | where Message contains \"gw-audit[-]:\" or Message contains \"portal portal[-]:\"\n   | take 1\n   | project IsConnected = true"
+                        "Syslog\n   | where TimeGenerated > ago(3d)\n   | where SyslogMessage contains \"gw-audit[-]:\" or Message contains \"portal portal[-]:\"\n   | take 1\n   | project IsConnected = true"
                       ]
                     }
                   ],
                   "dataTypes": [
                     {
                       "name": "Syslog (CTERA)",
-                      "lastDataReceivedQuery": "Syslog\n   | where Message contains \"gw-audit[-]:\" or Message contains \"portal portal[-]:\"\n   | summarize Time = max(TimeGenerated)\n   | where isnotempty(Time)"
+                      "lastDataReceivedQuery": "Syslog\n   | where SyslogMessage contains \"gw-audit[-]:\" or Message contains \"portal portal[-]:\"\n   | summarize Time = max(TimeGenerated)\n   | where isnotempty(Time)"
                     }
                   ],
                   "availability": {
@@ -365,14 +365,14 @@
           "dataTypes": [
             {
               "name": "Syslog (CTERA)",
-              "lastDataReceivedQuery": "Syslog\n   | where Message contains \"gw-audit[-]:\" or Message contains \"portal portal[-]:\"\n   | summarize Time = max(TimeGenerated)\n   | where isnotempty(Time)"
+              "lastDataReceivedQuery": "Syslog\n   | where SyslogMessage contains \"gw-audit[-]:\" or Message contains \"portal portal[-]:\"\n   | summarize Time = max(TimeGenerated)\n   | where isnotempty(Time)"
             }
           ],
           "connectivityCriterias": [
             {
               "type": "IsConnectedQuery",
               "value": [
-                "Syslog\n   | where TimeGenerated > ago(3d)\n   | where Message contains \"gw-audit[-]:\" or Message contains \"portal portal[-]:\"\n   | take 1\n   | project IsConnected = true"
+                "Syslog\n   | where TimeGenerated > ago(3d)\n   | where SyslogMessage contains \"gw-audit[-]:\" or Message contains \"portal portal[-]:\"\n   | take 1\n   | project IsConnected = true"
               ]
             }
           ],