segway

commands

helm repo add segway https://seg-way.github.io/charts
helm upgrade —install -f values-logscale-azure.yaml logscale segway/segway-sys-dest-logscale

helm upgrade —install -f values-azure-ad.yaml logscale segway/segway-sys-source-ms-azure-eventhub

values-azure-ad.yaml

args:
  - -e
nexthop:
  name: logscale-segway-sys-dest-logscale
config:
  data:
    vendor: microsoft
    product: azuread
    appparser: microsoft-azuread
secret:
  data:
    AZURE_STORAGE_CONN_STR: ""
    AZURE_STORAGE_CONTAINER: "azuread"
    EVENT_HUB_CONN_STR: ""
    EVENT_HUB_CONSUMER_GROUP: "segway"
    EVENT_HUB_TRANSPORT_TYPE: "AmqpOverWebsocket"

values-logscale-azure.yaml

args:
  - -e

secret:
  # Specifies whether a service account should be created
  create: true
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: "logscale-ps"
  url: "https://logscale-ps-inputs.gcp.logsr.life"
config:
  # name:
  annotations: {}
  syslogng:
    repos:
      #- name: segway-saas-microsoft-azure
      #  token:
      - name: segway-saas-microsoft-azuread
        token: 
      - name: segway-saas-microsoft-intune
        token:
      - name: segway-saas-microsoft-defender
        token:
      - name: segway-fallback
        token: 
        isCatchAll: true
    filters:
      - name: f_azure
        condition: |-
          tags('vendor:microsoft') and tags('product:azure');
      - name: f_azuread
        condition: |-
          tags('vendor:microsoft') and tags('product:azure');
      - name: f_intune
        condition: |-
          tags('vendor:microsoft') and tags('product:intune');
      - name: f_defender
        condition: |-
          tags('vendor:microsoft') and tags('product:defender');

    logPaths:
      #- name: azure
      #  filters:
      #    - filter(f_azure)
      #  destinations:
      #    - segway-saas-microsoft-azure
      #  flags: [catchall, final]
      - name: azuread
        filters:
          - filter(f_azuread)
        destinations:
          - segway-saas-microsoft-azuread
        flags: [catchall, final]
      - name: intune
        filters:
          - filter(f_intune)
        destinations:
          - segway-saas-microsoft-intune
        flags: [catchall, final]
      - name: defender
        filters:
          - filter(f_defender)
        destinations:
          - segway-saas-microsoft-defender
        flags: [catchall, final]
      - name: fallback
        destinations:
          - segway-fallback
        flags: [catchall, fallback, final]