Argus Case Mapper

mnemonic MDR Mapper (In)

Details

IDArgusCaseMapper
Typemapping-incoming
Version-1
From Version6.0.0
Default Incident Type
FeedNo
{
    "description": "",
    "feed": false,
    "id": "ArgusCaseMapper",
    "mapping": {
        "Argus Case": {
            "dontMapEventToLabels": true,
            "internalMapping": {
                "Argus Case Category": {
                    "complex": null,
                    "simple": "category.shortName"
                },
                "Argus Case HTML": {
                    "complex": null,
                    "simple": "description"
                },
                "Argus Case ID": {
                    "complex": null,
                    "simple": "id"
                },
                "Argus Case Link": {
                    "complex": null,
                    "simple": "url"
                },
                "Argus Case Service": {
                    "complex": null,
                    "simple": "service.shortName"
                },
                "Argus Case Status": {
                    "complex": null,
                    "simple": "status"
                },
                "Argus Case Type": {
                    "complex": null,
                    "simple": "type"
                },
                "Argus Customer ID": {
                    "complex": null,
                    "simple": "customer.id"
                },
                "dbotMirrorDirection": {
                    "complex": null,
                    "simple": "xsoar_mirroring.dbotMirrorDirection"
                },
                "dbotMirrorId": {
                    "complex": null,
                    "simple": "xsoar_mirroring.dbotMirrorId"
                },
                "dbotMirrorInstance": {
                    "complex": null,
                    "simple": "xsoar_mirroring.dbotMirrorInstance"
                },
                "dbotMirrorTags": {
                    "complex": null,
                    "simple": "xsoar_mirroring.dbotMirrorTags"
                },
                "occurred": {
                    "complex": {
                        "accessor": "",
                        "filters": [

                        ],
                        "root": "createdTimestamp",
                        "transformers": [

                        ]
                    },
                    "simple": ""
                },
                "severity": {
                    "complex": {
                        "accessor": "",
                        "filters": [

                        ],
                        "root": "priority",
                        "transformers": [

                        ]
                    },
                    "simple": ""
                }
            }
        },
        "dbot_classification_incident_type_all": {
            "dontMapEventToLabels": false,
            "internalMapping": {
                "category": {
                    "complex": {
                        "accessor": "name",
                        "filters": [

                        ],
                        "root": "category",
                        "transformers": [

                        ]
                    },
                    "simple": ""
                },
                "occurred": {
                    "complex": {
                        "accessor": "",
                        "filters": [

                        ],
                        "root": "createdTimestamp",
                        "transformers": [

                        ]
                    },
                    "simple": ""
                },
                "severity": {
                    "complex": {
                        "accessor": "",
                        "filters": [

                        ],
                        "root": "priority",
                        "transformers": [

                        ]
                    },
                    "simple": ""
                }
            }
        }
    },
    "name": "Argus Case Mapper",
    "type": "mapping-incoming",
    "version": -1,
    "fromVersion": "6.0.0"
}