TELEMETRY PIPELINE
Mandiant ASM

Mandiant ASM source plugin

The Mandiant ASM plugin lets you query Mandiant ASM to ingest data.

This plugin doesn't support the use of a descriptive metadata name in the Pipeline Builder interface.

Supported telemetry types

This plugin supports these telemetry types:

LogsMetricsTraces

Configuration parameters

Use the parameters in this section to configure your plugin. The Telemetry Pipeline web interface uses the values in the Name column to describe the parameters. Items in the Key column are the YAML keys to use in pipeline configuration files.

General

The configured fields replace sections of the url field in the YAML file in the following way:

url: https://asm-api.advantage.mandiant.com/api/v1/search/SEARCH_ELEMENT/SEARCH_QUERY
NameKeyDescriptionDefault
Project IDPROJECT_IDRequired.none
Search elementnoneRequired. Used in url field. Accepted values: entities, issues, technologies.entities
Search QuerynoneRequired. Used in url field.none
Access KeyINTRIGUE_ACCESS_KEYRequired.none
Secret KeyINTRIGUE_SECRET_KEYRequired.none