diff --git a/Splunk Dashboards/dataset_by_example.xml b/Splunk Dashboards/sdl_by_example.xml similarity index 92% rename from Splunk Dashboards/dataset_by_example.xml rename to Splunk Dashboards/sdl_by_example.xml index c5343bb..8ae95bd 100644 --- a/Splunk Dashboards/dataset_by_example.xml +++ b/Splunk Dashboards/sdl_by_example.xml @@ -45,9 +45,9 @@ - Searching Your Data in DataSet + Searching Your Data in Singularity Data Lake - This dashboard will help get you started on your journey. The first thing you'll want to do after configuring your DataSet Read API Key is to run a simple test to make sure you can access Dataset. + This dashboard will help get you started on your journey. The first thing you'll want to do after configuring your Singularity Data Lake Read API Key is to run a simple test to make sure you can access Singularity Data Lake. @@ -78,8 +78,8 @@ -

Now let's talk about executing queries against DataSet.

- The first thing you need to know is that this Add-On provides four methods to query DataSet: +

Now let's talk about executing queries against Singularity Data Lake.

+ The first thing you need to know is that this Add-On provides four methods to query Singularity Data Lake:
  1. Base Data Query - This will return the raw event data (fast, but very verbose). This type of query returns all evetn data so be mindful of the amount of data pushed across the wire and held in memory.
    2. @@ -142,7 +142,7 @@ All - + $baseQuery$ @@ -166,7 +166,7 @@ - Now let's select a field to aggregate statistics on in DataSet. (This is exponentially better performance than returning all data and using SPL to summarize.) + Now let's select a field to aggregate statistics on in Singularity Data Lake. (This is exponentially better performance than returning all data and using SPL to summarize.) tag @@ -187,7 +187,7 @@ - 2. PowerQuery: Aggregate in DataSet and display in Splunk! + 2. PowerQuery: Aggregate in Singularity Data Lake and display in Splunk! $basePowerQuery$ @@ -212,7 +212,7 @@ - 3. Facet Query: Aggregate in DataSet, Facet by a specific field and display in Splunk! + 3. Facet Query: Aggregate in Singularity Data Lake, Facet by a specific field and display in Splunk! $baseFacetQuery$ diff --git a/TA_dataset/README.md b/TA_dataset/README.md index 0303fd8..7a29b00 100644 --- a/TA_dataset/README.md +++ b/TA_dataset/README.md @@ -1,5 +1,5 @@ # TA_dataset -This add-on integrates with [DataSet](https://www.dataset.com) by [SentinelOne](https://www.sentinelone.com). +This add-on integrates with [DataSet](https://www.dataset.com) and [Singularity Data Lake](https://www.sentinelone.com/platform/xdr-ingestion) by [SentinelOne](https://www.sentinelone.com). For more information, see the [GitHub](https://github.com/scalyr/dataset-addon-for-splunk) repository. ##### Note diff --git a/TA_dataset/default/app.conf b/TA_dataset/default/app.conf index 9c764cf..7c80629 100644 --- a/TA_dataset/default/app.conf +++ b/TA_dataset/default/app.conf @@ -5,9 +5,9 @@ state = enabled build = 1 [launcher] -author = DataSet by SentinelOne +author = SentinelOne version = 2.0.44-SNAPSHOT -description = The Singularity Data Lake Add-On for Splunk integrates with DataSet by SentinelOne +description = The Singularity Data Lake Add-On for Splunk integrates SentinelOne's Data Lake or DataSet [ui] is_visible = 1 diff --git a/TA_dataset/default/data/ui/nav/default.xml b/TA_dataset/default/data/ui/nav/default.xml index 21af67a..1912e76 100644 --- a/TA_dataset/default/data/ui/nav/default.xml +++ b/TA_dataset/default/data/ui/nav/default.xml @@ -21,7 +21,7 @@ - + diff --git a/TA_dataset/default/data/ui/views/dataset_by_example.xml b/TA_dataset/default/data/ui/views/sdl_by_example.xml similarity index 92% rename from TA_dataset/default/data/ui/views/dataset_by_example.xml rename to TA_dataset/default/data/ui/views/sdl_by_example.xml index c5343bb..8ae95bd 100644 --- a/TA_dataset/default/data/ui/views/dataset_by_example.xml +++ b/TA_dataset/default/data/ui/views/sdl_by_example.xml @@ -45,9 +45,9 @@ - Searching Your Data in DataSet + Searching Your Data in Singularity Data Lake - This dashboard will help get you started on your journey. The first thing you'll want to do after configuring your DataSet Read API Key is to run a simple test to make sure you can access Dataset. + This dashboard will help get you started on your journey. The first thing you'll want to do after configuring your Singularity Data Lake Read API Key is to run a simple test to make sure you can access Singularity Data Lake. @@ -78,8 +78,8 @@ -

    Now let's talk about executing queries against DataSet.

    - The first thing you need to know is that this Add-On provides four methods to query DataSet: +

    Now let's talk about executing queries against Singularity Data Lake.

    + The first thing you need to know is that this Add-On provides four methods to query Singularity Data Lake:
    1. Base Data Query - This will return the raw event data (fast, but very verbose). This type of query returns all evetn data so be mindful of the amount of data pushed across the wire and held in memory.
      2. @@ -142,7 +142,7 @@ All - + $baseQuery$ @@ -166,7 +166,7 @@ - Now let's select a field to aggregate statistics on in DataSet. (This is exponentially better performance than returning all data and using SPL to summarize.) + Now let's select a field to aggregate statistics on in Singularity Data Lake. (This is exponentially better performance than returning all data and using SPL to summarize.) tag @@ -187,7 +187,7 @@ - 2. PowerQuery: Aggregate in DataSet and display in Splunk! + 2. PowerQuery: Aggregate in Singularity Data Lake and display in Splunk! $basePowerQuery$ @@ -212,7 +212,7 @@ - 3. Facet Query: Aggregate in DataSet, Facet by a specific field and display in Splunk! + 3. Facet Query: Aggregate in Singularity Data Lake, Facet by a specific field and display in Splunk! $baseFacetQuery$