{
  "name": "snyk",
  "title": "Snyk",
  "version": "1.27.1",
  "release": "ga",
  "description": "Collect logs from Snyk with Elastic Agent.",
  "type": "integration",
  "download": "/epr/snyk/snyk-1.27.1.zip",
  "path": "/package/snyk/1.27.1",
  "icons": [
    {
      "src": "/img/snyk-logo.svg",
      "path": "/package/snyk/1.27.1/img/snyk-logo.svg",
      "title": "Snyk logo",
      "size": "382x625",
      "type": "image/svg+xml"
    }
  ],
  "conditions": {
    "kibana": {
      "version": "^8.13.0"
    }
  },
  "owner": {
    "type": "elastic",
    "github": "elastic/security-service-integrations"
  },
  "categories": [
    "security",
    "cloudsecurity_cdr"
  ],
  "signature_path": "/epr/snyk/snyk-1.27.1.zip.sig",
  "format_version": "3.0.2",
  "readme": "/package/snyk/1.27.1/docs/README.md",
  "license": "basic",
  "assets": [
    "/package/snyk/1.27.1/LICENSE.txt",
    "/package/snyk/1.27.1/changelog.yml",
    "/package/snyk/1.27.1/manifest.yml",
    "/package/snyk/1.27.1/validation.yml",
    "/package/snyk/1.27.1/docs/README.md",
    "/package/snyk/1.27.1/img/snyk-logo.svg",
    "/package/snyk/1.27.1/kibana/tags.yml",
    "/package/snyk/1.27.1/data_stream/audit/manifest.yml",
    "/package/snyk/1.27.1/data_stream/audit/sample_event.json",
    "/package/snyk/1.27.1/data_stream/audit_logs/manifest.yml",
    "/package/snyk/1.27.1/data_stream/audit_logs/sample_event.json",
    "/package/snyk/1.27.1/data_stream/issues/manifest.yml",
    "/package/snyk/1.27.1/data_stream/issues/sample_event.json",
    "/package/snyk/1.27.1/data_stream/vulnerabilities/manifest.yml",
    "/package/snyk/1.27.1/data_stream/vulnerabilities/sample_event.json",
    "/package/snyk/1.27.1/data_stream/audit/fields/agent.yml",
    "/package/snyk/1.27.1/data_stream/audit/fields/base-fields.yml",
    "/package/snyk/1.27.1/data_stream/audit/fields/beats.yml",
    "/package/snyk/1.27.1/data_stream/audit/fields/fields.yml",
    "/package/snyk/1.27.1/data_stream/audit/fields/package-fields.yml",
    "/package/snyk/1.27.1/data_stream/audit_logs/fields/agent.yml",
    "/package/snyk/1.27.1/data_stream/audit_logs/fields/base-fields.yml",
    "/package/snyk/1.27.1/data_stream/audit_logs/fields/beats.yml",
    "/package/snyk/1.27.1/data_stream/audit_logs/fields/fields.yml",
    "/package/snyk/1.27.1/data_stream/audit_logs/fields/package-fields.yml",
    "/package/snyk/1.27.1/data_stream/issues/fields/agent.yml",
    "/package/snyk/1.27.1/data_stream/issues/fields/base-fields.yml",
    "/package/snyk/1.27.1/data_stream/issues/fields/beats.yml",
    "/package/snyk/1.27.1/data_stream/issues/fields/fields.yml",
    "/package/snyk/1.27.1/data_stream/issues/fields/package-fields.yml",
    "/package/snyk/1.27.1/data_stream/vulnerabilities/fields/agent.yml",
    "/package/snyk/1.27.1/data_stream/vulnerabilities/fields/base-fields.yml",
    "/package/snyk/1.27.1/data_stream/vulnerabilities/fields/beats.yml",
    "/package/snyk/1.27.1/data_stream/vulnerabilities/fields/fields.yml",
    "/package/snyk/1.27.1/data_stream/vulnerabilities/fields/package-fields.yml",
    "/package/snyk/1.27.1/data_stream/audit/agent/stream/httpjson.yml.hbs",
    "/package/snyk/1.27.1/data_stream/audit/elasticsearch/ingest_pipeline/default.yml",
    "/package/snyk/1.27.1/data_stream/audit_logs/agent/stream/cel.yml.hbs",
    "/package/snyk/1.27.1/data_stream/audit_logs/elasticsearch/ingest_pipeline/default.yml",
    "/package/snyk/1.27.1/data_stream/issues/agent/stream/cel.yml.hbs",
    "/package/snyk/1.27.1/data_stream/issues/elasticsearch/ingest_pipeline/default.yml",
    "/package/snyk/1.27.1/data_stream/vulnerabilities/agent/stream/httpjson.yml.hbs",
    "/package/snyk/1.27.1/data_stream/vulnerabilities/elasticsearch/ingest_pipeline/default.yml"
  ],
  "policy_templates": [
    {
      "name": "snyk",
      "title": "Snyk Events",
      "description": "Collect data from Snyk API",
      "inputs": [
        {
          "type": "cel",
          "vars": [
            {
              "name": "url",
              "type": "text",
              "title": "Base URL of Snyk API Server",
              "description": "The base URL as found [here](https://apidocs.snyk.io/?version=2024-04-29#overview).",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "https://api.snyk.io/"
            },
            {
              "name": "enable_request_tracer",
              "type": "bool",
              "title": "Enable request tracing",
              "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-httpjson.html#_request_tracer_filename) for details.",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "api_token",
              "type": "password",
              "title": "Snyk API Token",
              "multi": false,
              "required": true,
              "show_user": true
            },
            {
              "name": "http_client_timeout",
              "type": "text",
              "title": "HTTP Client Timeout",
              "description": "Duration before declaring that the HTTP client connection has timed out. Valid time units are ns, us, ms, s, m, h.",
              "multi": false,
              "required": false,
              "show_user": true
            },
            {
              "name": "proxy_url",
              "type": "text",
              "title": "Proxy URL",
              "description": "URL to proxy connections in the form of http\\[s\\]://<user>:<password>@<server name/ip>:<port>",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "ssl",
              "type": "yaml",
              "title": "SSL Configuration",
              "description": "SSL configuration options. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-ssl.html#ssl-common-config) for details.",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "title": "Collect data from Snyk API",
          "description": "Collect Audit Logs and Issues data from the Snyk REST API"
        },
        {
          "type": "httpjson",
          "vars": [
            {
              "name": "url",
              "type": "text",
              "title": "Base URL of Snyk API Server",
              "description": "The base URL as found [here](https://snyk.docs.apiary.io/#introduction/api-url).  No trailing /.",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "https://snyk.io/api/v1"
            },
            {
              "name": "enable_request_tracer",
              "type": "bool",
              "title": "Enable request tracing",
              "description": "The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-httpjson.html#_request_tracer_filename) for details.",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "api_token",
              "type": "password",
              "title": "Snyk API Token",
              "multi": false,
              "required": true,
              "show_user": true
            },
            {
              "name": "http_client_timeout",
              "type": "text",
              "title": "HTTP Client Timeout",
              "description": "Duration before declaring that the HTTP client connection has timed out. Valid time units are ns, us, ms, s, m, h.",
              "multi": false,
              "required": false,
              "show_user": true
            },
            {
              "name": "proxy_url",
              "type": "text",
              "title": "Proxy URL",
              "description": "URL to proxy connections in the form of http\\[s\\]://<user>:<password>@<server name/ip>:<port>",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "ssl",
              "type": "yaml",
              "title": "SSL Configuration",
              "description": "SSL configuration options. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-ssl.html#ssl-common-config) for details.",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "title": "Collect data from Snyk API (Legacy)",
          "description": "Collect Audit and Vulnerabilty data from the Snyk API v1"
        }
      ],
      "multiple": true
    }
  ],
  "data_streams": [
    {
      "type": "logs",
      "dataset": "snyk.audit",
      "title": "Collect Snyk Audit Logs",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "httpjson",
          "vars": [
            {
              "name": "audit_type",
              "type": "text",
              "title": "Audit Log Type",
              "description": "Type of Audit logs; \"org\" or \"group\"",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "org"
            },
            {
              "name": "audit_id",
              "type": "text",
              "title": "Group/Org ID",
              "description": "The ID of the Snyk group or organization",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": ""
            },
            {
              "name": "userId",
              "type": "text",
              "title": "User ID Filter",
              "description": "User ID on which to filter events",
              "multi": false,
              "required": false,
              "show_user": true,
              "default": ""
            },
            {
              "name": "email_address",
              "type": "text",
              "title": "Email Address Filter",
              "description": "Email Address on which to filter events",
              "multi": false,
              "required": false,
              "show_user": true,
              "default": ""
            },
            {
              "name": "event",
              "type": "text",
              "title": "Event ID Filter",
              "description": "Event ID on which to filter events",
              "multi": false,
              "required": false,
              "show_user": true,
              "default": ""
            },
            {
              "name": "project_id",
              "type": "text",
              "title": "Project ID Filter",
              "description": "Project ID on which to filter events",
              "multi": false,
              "required": false,
              "show_user": true,
              "default": ""
            },
            {
              "name": "interval",
              "type": "text",
              "title": "Interval to query Snyk Events API",
              "description": "Go Duration syntax (eg. 10s)",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "10s"
            },
            {
              "name": "first_interval",
              "type": "text",
              "title": "Initial interval to query Snyk Events API",
              "description": "Go Duration syntax (eg. 10s)",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "720h"
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false,
              "default": [
                "forwarded",
                "snyk-audit"
              ]
            },
            {
              "name": "preserve_original_event",
              "type": "bool",
              "title": "Preserve original event",
              "description": "Preserves a raw copy of the original event, added to the field `event.original`",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": false
            },
            {
              "name": "processors",
              "type": "yaml",
              "title": "Processors",
              "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "httpjson.yml.hbs",
          "title": "Collect Snyk Audit Logs",
          "description": "Collect Snyk Audit Logs via the Snyk API",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "snyk",
      "path": "audit"
    },
    {
      "type": "logs",
      "dataset": "snyk.audit_logs",
      "title": "Collect Snyk Audit Logs",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "cel",
          "vars": [
            {
              "name": "audit_type",
              "type": "select",
              "title": "Audit Log Type",
              "description": "Type of Audit logs.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "/rest/orgs/"
            },
            {
              "name": "audit_id",
              "type": "text",
              "title": "Group/Organization ID",
              "description": "The ID of the Snyk group or organization. For Organization audit logs, this may be \"ALL\", in which case logs from all organizations visible to the user will be collected. This number of organizations in this case is limited to 100 and if more than that number of organizations are visible, only the first 100 will be collected.",
              "multi": false,
              "required": true,
              "show_user": true
            },
            {
              "name": "user_id",
              "type": "text",
              "title": "User ID Filter",
              "description": "User ID on which to filter events.",
              "multi": false,
              "required": false,
              "show_user": true
            },
            {
              "name": "event",
              "type": "text",
              "title": "Event Type Filter",
              "description": "Event types on which to filter events.",
              "multi": true,
              "required": false,
              "show_user": true
            },
            {
              "name": "project_id",
              "type": "text",
              "title": "Project ID Filter",
              "description": "Project ID on which to filter events.",
              "multi": false,
              "required": false,
              "show_user": true
            },
            {
              "name": "interval",
              "type": "text",
              "title": "Interval to query Snyk Events API.",
              "description": "Go Duration syntax (eg. 10s)",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "10s"
            },
            {
              "name": "first_interval",
              "type": "text",
              "title": "Initial interval to query Snyk Events API.",
              "description": "Go Duration syntax (eg. 10s)",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "batch_size",
              "type": "integer",
              "title": "Batch Size",
              "description": "Batch size for the response of the Snyk API. It must be between 1 - 100 if present.",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false,
              "default": [
                "forwarded",
                "snyk-audit-logs"
              ]
            },
            {
              "name": "preserve_original_event",
              "type": "bool",
              "title": "Preserve original event",
              "description": "Preserves a raw copy of the original event, added to the field `event.original`.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": false
            },
            {
              "name": "processors",
              "type": "yaml",
              "title": "Processors",
              "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "cel.yml.hbs",
          "title": "Collect Snyk Audit Logs",
          "description": "Collect Snyk Audit Logs via the Snyk REST API",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "snyk",
      "path": "audit_logs"
    },
    {
      "type": "logs",
      "dataset": "snyk.issues",
      "title": "Collect Snyk Issues Data",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "cel",
          "vars": [
            {
              "name": "issues_type",
              "type": "select",
              "title": "Audit Log Type",
              "description": "Type of Audit logs.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "/rest/orgs/"
            },
            {
              "name": "issues_id",
              "type": "text",
              "title": "Group/Organization ID",
              "description": "The ID of the Snyk group or organization.",
              "multi": false,
              "required": true,
              "show_user": true
            },
            {
              "name": "effective_severity_level",
              "type": "text",
              "title": "Effective Severity Level",
              "description": "One or more effective severity levels to filter issues.",
              "multi": true,
              "required": false,
              "show_user": true,
              "default": [
                "critical",
                "high",
                "medium",
                "low",
                "info"
              ]
            },
            {
              "name": "status",
              "type": "text",
              "title": "Status",
              "description": "An issue's status",
              "multi": true,
              "required": false,
              "show_user": true,
              "default": [
                "open",
                "resolved"
              ]
            },
            {
              "name": "ignored",
              "type": "select",
              "title": "Ignored",
              "description": "Filter on whether an issue is ignored or not.",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": ""
            },
            {
              "name": "type",
              "type": "text",
              "title": "Types",
              "description": "The type of issues to filter the results by.",
              "multi": true,
              "required": false,
              "show_user": true,
              "default": [
                "package_vulnerability",
                "license",
                "cloud",
                "code",
                "custom",
                "config"
              ]
            },
            {
              "name": "scan_item_id",
              "type": "text",
              "title": "Scan Item",
              "description": "A scan item id to filter issues through their scan item relationship.",
              "multi": false,
              "required": false,
              "show_user": true
            },
            {
              "name": "scan_item_type",
              "type": "text",
              "title": "Scan Item Types",
              "description": "The scan item type of issues to filter the results by.",
              "multi": true,
              "required": false,
              "show_user": true,
              "default": [
                "project",
                "environment"
              ]
            },
            {
              "name": "interval",
              "type": "text",
              "title": "Interval to query Snyk Events API",
              "description": "Go Duration syntax (eg. 10s)",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "24h"
            },
            {
              "name": "first_interval",
              "type": "text",
              "title": "Initial interval to query Snyk Events API.",
              "description": "Go Duration syntax (eg. 10s)",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "batch_size",
              "type": "integer",
              "title": "Batch Size",
              "description": "Batch size for the response of the Snyk API. It must be between 1 - 100 if present.",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false,
              "default": [
                "forwarded",
                "snyk-issues"
              ]
            },
            {
              "name": "preserve_original_event",
              "type": "bool",
              "title": "Preserve original event",
              "description": "Preserves a raw copy of the original event, added to the field `event.original`",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": false
            },
            {
              "name": "processors",
              "type": "yaml",
              "title": "Processors",
              "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "cel.yml.hbs",
          "title": "Collect Snyk Issues Data",
          "description": "Collect Snyk Issues data via the Snyk API",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "snyk",
      "path": "issues"
    },
    {
      "type": "logs",
      "dataset": "snyk.vulnerabilities",
      "title": "Collect Snyk Vulnerability Data",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "httpjson",
          "vars": [
            {
              "name": "orgs",
              "type": "text",
              "title": "Orgs",
              "description": "The list of org IDs to filter the results by",
              "multi": true,
              "required": true,
              "show_user": true
            },
            {
              "name": "severity",
              "type": "text",
              "title": "Severity",
              "description": "The severity levels of issues to filter the results by",
              "multi": true,
              "required": false,
              "show_user": true,
              "default": [
                "critical",
                "high",
                "medium",
                "low"
              ]
            },
            {
              "name": "exploit_maturity",
              "type": "text",
              "title": "Exploit Maturity",
              "description": "The exploit maturity levels of issues to filter the results by",
              "multi": true,
              "required": false,
              "show_user": true,
              "default": [
                "mature",
                "proof-of-concept",
                "no-known-exploit",
                "no-data"
              ]
            },
            {
              "name": "types",
              "type": "text",
              "title": "Types",
              "description": "The type of issues to filter the results by",
              "multi": true,
              "required": false,
              "show_user": true,
              "default": [
                "vuln",
                "license",
                "configuration"
              ]
            },
            {
              "name": "languages",
              "type": "text",
              "title": "Languages",
              "description": "The type of languages to filter the results by",
              "multi": true,
              "required": false,
              "show_user": true,
              "default": [
                "javascript",
                "ruby",
                "java",
                "scala",
                "python",
                "golang",
                "php",
                "dotnet",
                "swift-objective-c",
                "elixir",
                "docker",
                "terraform",
                "kubernetes",
                "helm",
                "cloudformation"
              ]
            },
            {
              "name": "projects",
              "type": "text",
              "title": "Projects",
              "description": "The list of project IDs to filter issues by, max projects allowed is 1000",
              "multi": true,
              "required": false,
              "show_user": true
            },
            {
              "name": "identifier",
              "type": "text",
              "title": "Identifier",
              "description": "Search term to filter issue name by, or an exact CVE or CWE",
              "multi": false,
              "required": false,
              "show_user": true
            },
            {
              "name": "ignored",
              "type": "bool",
              "title": "Ignored",
              "description": "If set to true, only include issues which are ignored, if set to false, only include issues which are not ignored",
              "multi": false,
              "required": false,
              "show_user": true,
              "default": false
            },
            {
              "name": "patched",
              "type": "bool",
              "title": "Patched",
              "description": "If set to true, only include issues which are patched, if set to false, only include issues which are not patched",
              "multi": false,
              "required": false,
              "show_user": true,
              "default": false
            },
            {
              "name": "fixable",
              "type": "bool",
              "title": "Fixable",
              "description": "If set to true, only include issues which are fixable, if set to false, only include issues which are not fixable. An issue is fixable if it is either upgradable, patchable or pinnable. Also see isUpgradable, isPatchable and isPinnable filters.",
              "multi": false,
              "required": false,
              "show_user": true,
              "default": false
            },
            {
              "name": "is_fixed",
              "type": "bool",
              "title": "Is Fixed",
              "description": "If set to true, only include issues which are fixed, if set to false, only include issues which are not fixed",
              "multi": false,
              "required": false,
              "show_user": true,
              "default": false
            },
            {
              "name": "is_upgradeable",
              "type": "bool",
              "title": "Is Upgradeable",
              "description": "If set to true, only include issues which are upgradable, if set to false, only include issues which are not upgradable",
              "multi": false,
              "required": false,
              "show_user": true,
              "default": false
            },
            {
              "name": "is_patchable",
              "type": "bool",
              "title": "Is Patchable",
              "description": "If set to true, only include issues which are patchable, if set to false, only include issues which are not patchable",
              "multi": false,
              "required": false,
              "show_user": true,
              "default": false
            },
            {
              "name": "is_pinnable",
              "type": "bool",
              "title": "Is Pinnable",
              "description": "If set to true, only include issues which are pinnable, if set to false, only include issues which are not pinnable",
              "multi": false,
              "required": false,
              "show_user": true,
              "default": false
            },
            {
              "name": "min_priority_score",
              "type": "text",
              "title": "Min Priority Score",
              "description": "The priority score ranging between 0-1000",
              "multi": false,
              "required": false,
              "show_user": true,
              "default": 0
            },
            {
              "name": "max_priority_score",
              "type": "text",
              "title": "Max Priority Score",
              "description": "The priority score ranging between 0-1000",
              "multi": false,
              "required": false,
              "show_user": true,
              "default": 1000
            },
            {
              "name": "interval",
              "type": "text",
              "title": "Interval to query Snyk Events API",
              "description": "Go Duration syntax (eg. 10s)",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "24h"
            },
            {
              "name": "first_interval",
              "type": "text",
              "title": "Initial interval to query Snyk Events API",
              "description": "Go Duration syntax (eg. 10s)",
              "multi": false,
              "required": true,
              "show_user": false,
              "default": "24h"
            },
            {
              "name": "tags",
              "type": "text",
              "title": "Tags",
              "multi": true,
              "required": false,
              "show_user": false,
              "default": [
                "forwarded",
                "snyk-vulnerabilities"
              ]
            },
            {
              "name": "preserve_original_event",
              "type": "bool",
              "title": "Preserve original event",
              "description": "Preserves a raw copy of the original event, added to the field `event.original`",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": false
            },
            {
              "name": "processors",
              "type": "yaml",
              "title": "Processors",
              "description": "Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent before the logs are parsed. See [Processors](https://www.elastic.co/guide/en/beats/filebeat/current/filtering-and-enhancing-data.html) for details.",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "template_path": "httpjson.yml.hbs",
          "title": "Collect Snyk Vulnerability Data",
          "description": "Collect Snyk Vulnerability data via the Snyk API",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "snyk",
      "path": "vulnerabilities"
    }
  ]
}