quix.yaml

# Quix Project Descriptor
# This file describes the data pipeline and configuration of resources of a Quix Project.

metadata:
  version: 1.0

# This section describes the Deployments of the data pipeline
deployments:
  - name: Zeek Http log gen
    application: Zeek Http log gen
    deploymentType: Service
    version: 20fb03479ac44813f938d4146a4ac4223fadab26
    resources:
      cpu: 200
      memory: 500
      replicas: 1
    desiredStatus: Running
    variables:
      - name: Topic
        inputType: OutputTopic
        description: Name of the output topic to write into
        required: true
        value: zeek-http-logs
  - name: Zeek Http Siem Detection
    application: Siem-detection
    deploymentType: Service
    version: 99549ffadb169100278f3aa663ee5ee1e374912c
    resources:
      cpu: 200
      memory: 500
      replicas: 1
    desiredStatus: Running
    variables:
      - name: log_data
        inputType: InputTopic
        description: This is the input topic for log data
        required: true
        value: zeek-http-logs
      - name: alerts
        inputType: OutputTopic
        description: This is the output topic for siem alerts
        required: true
        value: alerts
      - name: log_info
        inputType: FreeText
        description: Consumes zeek logs
        required: false
        value: zeek
  - name: Authentication log gen
    application: Authentication log gen
    deploymentType: Service
    version: e07b4aa745f27cadb9fdbdf87b35b9a917a44ecf
    resources:
      cpu: 200
      memory: 500
      replicas: 1
    desiredStatus: Running
    variables:
      - name: Topic
        inputType: OutputTopic
        description: Name of the output topic to write into
        required: true
        value: authentication-linux-logs
  - name: Auth Linux Siem Detection
    application: Siem-detection
    deploymentType: Service
    version: 927a2e366d82b3691bfa865f6b3e48a1c83ba41d
    resources:
      cpu: 200
      memory: 500
      replicas: 1
    desiredStatus: Running
    variables:
      - name: log_data
        inputType: InputTopic
        description: This is the input topic for log data
        required: true
        value: authentication-linux-logs
      - name: alerts
        inputType: OutputTopic
        description: This is the output topic for siem alerts
        required: true
        value: alerts
      - name: log_info
        inputType: FreeText
        description: Consumes zeek logs
        required: false
        value: authentication-linux
  - name: Firewall log gen
    application: Firewall log gen
    deploymentType: Service
    version: 4abf5ceadc7b9877ba0f55616c05a859d7ae1d40
    resources:
      cpu: 200
      memory: 500
      replicas: 1
    desiredStatus: Running
    variables:
      - name: Topic
        inputType: OutputTopic
        description: Name of the output topic to write into
        required: true
        value: zeek-firewall-logs
  - name: Zeek Firewall Siem Detection
    application: Siem-detection
    deploymentType: Service
    version: d1d8cedccfd07352abc7f9377594deb4c4e4e3a5
    resources:
      cpu: 200
      memory: 500
      replicas: 1
    desiredStatus: Running
    variables:
      - name: log_data
        inputType: InputTopic
        description: This is the input topic for log data
        required: true
        value: zeek-firewall-logs
      - name: alerts
        inputType: OutputTopic
        description: This is the output topic for siem alerts
        required: true
        value: alerts
      - name: log_info
        inputType: FreeText
        description: Consumes zeek logs
        required: false
        value: zeek
  - name: UI
    application: UI
    deploymentType: Service
    version: 48f72687ee163ed11a69512d8acbaf3659b1aa96
    resources:
      cpu: 200
      memory: 500
      replicas: 1
    publicAccess:
      enabled: true
      urlPrefix: ui-387fb49
    desiredStatus: Running
    variables:
      - name: input
        inputType: InputTopic
        description: The topic to read from
        required: true
        value: alert_events
      - name: bearer_token
        inputType: FreeText
        description: ''
        required: false
        value: {{ pat_token }}

# This section describes the Topics of the data pipeline
topics:
  - name: alert_events
    persisted: false
    configuration:
      partitions: 1
      replicationFactor: 2
      retentionInMinutes: 1440
      retentionInBytes: 52428800
  - name: zeek-http-logs
    persisted: false
    configuration:
      partitions: 1
      replicationFactor: 2
      retentionInMinutes: 1440
      retentionInBytes: 52428800
  - name: zeek-firewall-logs
    persisted: false
    configuration:
      partitions: 1
      replicationFactor: 2
      retentionInMinutes: 1440
      retentionInBytes: 52428800
  - name: authentication-linux-logs
    persisted: false
    configuration:
      partitions: 1
      replicationFactor: 2
      retentionInMinutes: 1440
      retentionInBytes: 52428800
  - name: alerts
    persisted: false
    configuration:
      partitions: 1
      replicationFactor: 2
      retentionInMinutes: 1440
      retentionInBytes: 52428800
  - name: sigma-rules
    persisted: false
    configuration:
      partitions: 1
      replicationFactor: 2
      retentionInMinutes: 14400
      retentionInBytes: 52428800