{
    "description": "Incoming Mapper for Flashpoint Alerts",
    "feed": false,
    "id": "Flashpoint Alerts - Incoming Mapper",
    "mapping": {
        "Flashpoint Alerts": {
            "dontMapEventToLabels": false,
            "internalMapping": {
                "Flashpoint Alert ID": {
                    "complex": null,
                    "simple": "alert_id"
                },
                "Flashpoint Alert Text": {
                    "complex": null,
                    "simple": "source.body.text/plain"
                },
                "Flashpoint Created Date": {
                    "complex": null,
                    "simple": "source.created_at.date-time"
                },
                "Flashpoint First Observed Date": {
                    "complex": null,
                    "simple": "source.first_observed_at.date-time"
                },
                "Flashpoint ID": {
                    "complex": null,
                    "simple": "fpid"
                },
                "Flashpoint Keyword Text": {
                    "complex": null,
                    "simple": "keyword.keyword_text"
                },
                "Flashpoint Last Observed Date": {
                    "complex": null,
                    "simple": "source.last_observed_at.date-time"
                },
                "Flashpoint Link to Alert": {
                    "complex": {
                        "accessor": "fpid",
                        "filters": [

                        ],
                        "root": "source",
                        "transformers": [
                            {
                                "args": {
                                    "prefix": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": "https://fp.tools/home/redirect/"
                                        }
                                    },
                                    "suffix": {
                                        "isContext": false,
                                        "value": null
                                    }
                                },
                                "operator": "concat"
                            }
                        ]
                    },
                    "simple": ""
                },
                "Flashpoint Native ID": {
                    "complex": null,
                    "simple": "source.native_id"
                },
                "Flashpoint Site Actor Names": {
                    "complex": null,
                    "simple": "source.site_actor.names.handle"
                },
                "Flashpoint Site Title": {
                    "complex": null,
                    "simple": "source.site.title"
                },
                "Flashpoint Sort Date": {
                    "complex": null,
                    "simple": "source.sort_date"
                },
                "Flashpoint Source": {
                    "complex": null,
                    "simple": "source.source"
                },
                "Flashpoint Source Basetypes": {
                    "complex": {
                        "accessor": "basetypes",
                        "filters": [],
                        "root": "source",
                        "transformers": [
                            {
                                "args": {
                                    "separator": {
                                        "isContext": false,
                                        "value": {
                                            "complex": null,
                                            "simple": ", "
                                        }
                                    }
                                },
                                "operator": "join"
                            }
                        ]
                    },
                    "simple": ""
                },
                "Flashpoint Source File": {
                    "complex": null,
                    "simple": "source.file"
                },
                "Flashpoint Source Owner": {
                    "complex": null,
                    "simple": "source.owner"
                },
                "Flashpoint Source Repo": {
                    "complex": null,
                    "simple": "source.repo"
                },
                "Flashpoint Source URL": {
                    "complex": null,
                    "simple": "source.url"
                },
                "Flashpoint Title": {
                    "complex": null,
                    "simple": "source.title"
                },
                "occurred": {
                    "complex": null,
                    "simple": "source.created_at.date-time"
                }
            }
        }
    },
    "name": "Flashpoint Alerts - Incoming Mapper",
    "type": "mapping-incoming",
    "version": -1,
    "fromVersion": "6.0.0"
}