Documentation Index
Fetch the complete documentation index at: https://learninghub.blinkops.com/llms.txt
Use this file to discover all available pages before exploring further.
Basic Parameters
| Parameter | Description |
|---|
| AWS Authentication Type | Determines which authentication type is being used for this flow source.Value of ‘AccessKey’ indicates key/secret auth, and that accesskeyid and accesssecret fields should be included.Value of ‘RoleARN’ indicates that role auth is being used and that the role object should be included. |
| Access Key ID | AWS Access Key ID. |
| Access Secret | AWS Access Secret. |
| Account ID | Account ID of the flow source. |
| Region | Location of the flow source. |
| Role ARN | String containing role authentication data. Used to authenticate via role. |
| S3 Bucket | Name of the S3 bucket were the VPC flow logs are stored. |
| S3 Bucket Region | AWS Region the S3 bucket is in. |
| S3 Flow Log Path Prefix | Folder Prefix where logs are stored. |
| VPC Name | The name of the VPC. Eg. prod-vpc-east. |
Advanced Parameters
| Parameter | Description |
|---|
| Enabled | If this VPC is enabled or disabled. |
| SQS URL | SQS URL of the S3 Events. |
| Tags | An array of strings to tag every flow from this VPC with. |
| VPC Sample Rate | The sample rate of flows this VPC will send. Between 1 and 65535. |
Example Output
{ "meta": { "code": 200, "count": 1 }, "data": [ { "awsauthtype": "RoleARN", "accesskeyid": "AKIAJITERGTEHETGETHN", "accesssecret": "JH2zVMpqTwrbrthrtherthrthtYppyarw1u", "role": { "arn": "arn:aws:iam::464179634201:role/Extension" }, "shardid": "shardId-000000000000", "stream": "flowlogstream" }, { "awsauthtype": "RoleARN", "accesskeyid": "AKIAJITERGTEHETGETHN", "accesssecret": "JH2zVMpqTwrbrthrtherthrthtYppyarw1u", "role": { "arn": "arn:aws:iam::464179634201:role/Extension" }, "bucket": "flowlogs", "bucketregion": "us-east-1", "prefix": "AWSLogs/123456/vpcflowlogs/us-east-1/", "sqsurl": "https://sqs.us-east-1.amazonaws.com/123456/flowlogs" }, { "accountname": "securitygroupdiag", "accountkey": "45KiBH8ErtaU5jBLUsP3zow6XyA11fqLeUeSrQ==", "containername": "insights-logs-networksecuritygroupflowevent", "networksecuritygroup": "NSG1", "resourcegroup": "SEC-USA-GROUP", "subscriptionid": "45DD9999-Q333-22BB-33AA-A0000F000C00" }, { "projectid": "security-235d", "subid": "ggl-sec-netography-test-id", "samplepercent": 0 }, { "apikey": "qSsdZPS7nCupBBEH9r83-0QswQrTrhT13Os1S", "bucket": "flowlogs", "prefix": "folder", "serviceinstanceid": "crn:v1:bluemix:public:cloud-object-storage:global:a/d05b00aeabbe4f578d3c4e83a6c82f62:9f95b4c8-f29a-4360-b326-560e2dbca522::" }, { "bucket": "oci-logs._flowlogs.ocid1.tenancy.oc1..aaaaaaaawho6ghbcze3r7oxlqjciqwo233cmwf4weryty4eb3ypgyzhuq", "tenancy": "ocid1.tenancy.oc1..aaaaaaaawho6ghbcze3r7oxlqjciqwrergf46fqnfppyv4eb3ypgyzhuq", "userid": "ocid1.user.oc1..aaaaaaaahvu26nhp2io7bujstpdk6drgrgtoxdfvpz3dxfc4hsy4sp2q", "prefix": "folder" } ]}
Workflow Library Example
Create Vpc Aws S3 with Netography and Send Results Via Email