BLUEMAX IPS

Changelog

• Added 9 new log schemas
  • bluemax-ips-system (alert)
  • bluemax-ips-audit (config_audit, connection_audit)
  • bluemax-ips-iface (system_interface_traffic)
  • bluemax-ips-domain-stats (traffic_domain_cnt)
  • bluemax-ips-framesize-stats (traffic_framesize_cnt)
  • bluemax-ips-inout-stats (traffic_inout_cnt)
  • bluemax-ips-interface-stasts (traffic_interface_cnt)
  • bluemax-ips-protocol-stats (traffic_protocol_cnt)
  • bluemax-ips-service-stats (traffic_service_cnt)
• Fixed BLUEMAX IPS logger model to map "attack" log schema instead of "bluemax-ips-threat" for attack logs - Also fixed BLUMAX IPS 침입탐지 query to search for "attack" log schema

Before updating the app, delete "침입탐지" stream rule then update

First release

• Support dedicated log parser, log schemas, logger model, and dashboards