{
  "name": "mysql_enterprise",
  "title": "MySQL Enterprise (Audit Logs)",
  "version": "1.17.3",
  "release": "ga",
  "description": "Collect MySQL Enterprise audit logs for security monitoring.",
  "type": "integration",
  "download": "/epr/mysql_enterprise/mysql_enterprise-1.17.3.zip",
  "path": "/package/mysql_enterprise/1.17.3",
  "icons": [
    {
      "src": "/img/logo_mysql.svg",
      "path": "/package/mysql_enterprise/1.17.3/img/logo_mysql.svg",
      "title": "MySQL",
      "size": "32x32",
      "type": "image/svg+xml"
    }
  ],
  "conditions": {
    "kibana": {
      "version": "^8.11.0 || ^9.0.0"
    }
  },
  "owner": {
    "type": "elastic",
    "github": "elastic/security-service-integrations"
  },
  "categories": [
    "security",
    "observability",
    "datastore",
    "database_security"
  ],
  "signature_path": "/epr/mysql_enterprise/mysql_enterprise-1.17.3.zip.sig",
  "group": "mysql",
  "format_version": "3.0.0",
  "readme": "/package/mysql_enterprise/1.17.3/docs/README.md",
  "license": "basic",
  "assets": [
    "/package/mysql_enterprise/1.17.3/LICENSE.txt",
    "/package/mysql_enterprise/1.17.3/changelog.yml",
    "/package/mysql_enterprise/1.17.3/manifest.yml",
    "/package/mysql_enterprise/1.17.3/validation.yml",
    "/package/mysql_enterprise/1.17.3/docs/README.md",
    "/package/mysql_enterprise/1.17.3/img/logo_mysql.svg",
    "/package/mysql_enterprise/1.17.3/kibana/tags.yml",
    "/package/mysql_enterprise/1.17.3/data_stream/audit/manifest.yml",
    "/package/mysql_enterprise/1.17.3/data_stream/audit/sample_event.json",
    "/package/mysql_enterprise/1.17.3/data_stream/audit/fields/agent.yml",
    "/package/mysql_enterprise/1.17.3/data_stream/audit/fields/base-fields.yml",
    "/package/mysql_enterprise/1.17.3/data_stream/audit/fields/ecs.yml",
    "/package/mysql_enterprise/1.17.3/data_stream/audit/fields/fields.yml",
    "/package/mysql_enterprise/1.17.3/data_stream/audit/agent/stream/stream.yml.hbs",
    "/package/mysql_enterprise/1.17.3/data_stream/audit/elasticsearch/ingest_pipeline/default.yml"
  ],
  "policy_templates": [
    {
      "name": "mysql_enterprise",
      "title": "MySQL Enterprise audit logs",
      "description": "Collect MySQL Enterprise audit logs",
      "inputs": [
        {
          "type": "filestream",
          "title": "Collect logs from MySQL Enterprise instances",
          "description": "Collecting MySQL Enterprise audit logs"
        }
      ],
      "multiple": true
    }
  ],
  "data_streams": [
    {
      "type": "logs",
      "dataset": "mysql_enterprise.audit",
      "title": "MySQL Enterprise Audit Log",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "filestream",
          "vars": [
            {
              "name": "paths",
              "type": "text",
              "title": "Paths",
              "multi": true,
              "required": true,
              "show_user": true,
              "default": [
                "/home/user/mysqlauditlogs/audit.*.log"
              ]
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": true,
              "show_user": false,
              "default": [
                "mysql_enterprise-audit"
              ]
            },
            {
              "name": "preserve_original_event",
              "type": "bool",
              "title": "Preserve original event",
              "description": "Preserves a raw copy of the original event, added to the field `event.original`",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": false
            },
            {
              "name": "processors",
              "type": "yaml",
              "title": "Processors",
              "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.\n",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "MySQL Enterprise Audit Log",
          "description": "Collect MySQL Enterprise audit logs",
          "enabled": true,
          "ingestion_method": "File"
        }
      ],
      "package": "mysql_enterprise",
      "path": "audit"
    }
  ]
}