Versasec CMS Initial Solution Version

[joergd1985]

Change(s):

• Initial submission of the VersasecCMS solution.
• Added Data Connectors for VersasecCMS.

Reason for Change(s):

• Contributing a new solution for VersasecCMS to the Azure Sentinel repo.

Version Updated:

• Initial version (1.0.0)

Testing Completed:

• Yes

Checked that the validations are passing and have addressed any issues that are present:

• Yes

[joergd1985]

@microsoft-github-policy-service agree company="Versasec AB"

[joergd1985]

The domain has already been adjusted, so why is this error still occurring?
What exactly is still missing to successfully complete the PR?

[v-maheshbh]

Hi @joergd1985
Please refer to the naming convention outlined below for the solution structure and rename the connector files names accordingly.
https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Cloudflare%20CCF/Data%20Connectors/CloudflareLog_CCF

and also ensure the logo is in SVG format, update the logo directory path (Azure/Azure-Sentinel/master/Logos).
You can refer to any existing solution for guidance.

Kindly attach the screenshot showing the CCF connector in a connected state, and also include the invocation logs for reference.

Thanks!

[joergd1985]

Files renamed and logo provided as svg.
How I can make a picture of the connection state of the dataconnector?
What do you mean by "invocation logs for reference"

[joergd1985]

[query_data_error_log.csv](https://github.com/user-attachments/files/24252371/query_data_error_log.csv) [query_data_sys_log.csv](https://github.com/user-attachments/files/24252372/query_data_sys_log.csv)

Shows the retrieval of data.

[v-maheshbh]

Hi @joergd1985
Please ensure that the connector definition file name matches the id column, and verify that the table name specified in the definition file is aligned with the dataType defined in the poller configuration. Both must remain consistent with the required mapping standards.
For more details, refer to the solution provided below
https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Proofpoint%20On%20demand(POD)%20Email%20Security/Data%20Connectors/ProofPointEmailSecurity_CCP

and Please follow the path below:

Microsoft Sentinel → Workspaces → [Your Workspace] → Data Connectors → [Connector Name] → Add Credentials → Connect

Thanks!

[joergd1985]

Hi @joergd1985 Please ensure that the connector definition file name matches the id column, and verify that the table name specified in the definition file is aligned with the dataType defined in the poller configuration. Both must remain consistent with the required mapping standards. For more details, refer to the solution provided below https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Proofpoint%20On%20demand(POD)%20Email%20Security/Data%20Connectors/ProofPointEmailSecurity_CCP

and Please follow the path below:

Microsoft Sentinel → Workspaces → [Your Workspace] → Data Connectors → [Connector Name] → Add Credentials → Connect

Thanks!

This: "and verify that the table name specified in the definition file is aligned with the dataType defined in the poller configuration" I don't understand, can you please more specific?

and what do you mean with this: "Microsoft Sentinel → Workspaces → [Your Workspace] → Data Connectors → [Connector Name] → Add Credentials → Connect"?

thanks

[joergd1985]

The connector retrieves the data as shown. However, it does not change to the ‘connected’ status. Furthermore, after entering the data and pressing the Connect button, an error message appears: Deployment failed - Cannot connect the connector. Missing dependencies

[v-maheshbh]

Hi @joergd1985 Please ensure that the connector definition file name matches the id column, and verify that the table name specified in the definition file is aligned with the dataType defined in the poller configuration. Both must remain consistent with the required mapping standards. For more details, refer to the solution provided below https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Proofpoint%20On%20demand(POD)%20Email%20Security/Data%20Connectors/ProofPointEmailSecurity_CCP
and Please follow the path below:
Microsoft Sentinel → Workspaces → [Your Workspace] → Data Connectors → [Connector Name] → Add Credentials → Connect
Thanks!

This: "and verify that the table name specified in the definition file is aligned with the dataType defined in the poller configuration" I don't understand, can you please more specific?

and what do you mean with this: "Microsoft Sentinel → Workspaces → [Your Workspace] → Data Connectors → [Connector Name] → Add Credentials → Connect"?

thanks

Kindly refer to the ProofPointEmailSecurity_CCP solution for more clarity, as the current connector is encountering missing dependencies.
I have added the required points in the previous comments. Kindly go through them.

https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Proofpoint%20On%20demand(POD)%20Email%20Security/Data%20Connectors/ProofPointEmailSecurity_CCP

Thanks!

[joergd1985]

I have made the changes, so what is the problem now? Could you please describe the problem in more detail?

[joergd1985]

[v-maheshbh]

Hi @joergd1985
Kindly check the main template inside the ZIP folder, as it differs from the main template placed outside the ZIP. Please ensure both are consistent.

Thanks!

[v-maheshbh]

Hi @joergd1985
Kindly update the release notes with an appropriate comment so we can proceed with the approval.

Thanks!