Skip to content

[GA] Agari CCF Data Connector - #14960

Open
v-ramonas wants to merge 7 commits into
Azure:masterfrom
v-ramonas:eb/Agari-GA
Open

[GA] Agari CCF Data Connector#14960
v-ramonas wants to merge 7 commits into
Azure:masterfrom
v-ramonas:eb/Agari-GA

Conversation

@v-ramonas

Copy link
Copy Markdown
Contributor
  • Change(s):
    Promote connector to GA (Generally Available)

  • Reason for Change(s):
    The connector is ready for promotion to GA

  • Version Updated:
    3.0.1 Patch

  • Testing Completed: Yes

  • Checked that the validations are passing and have addressed any issues that are present: Yes

@v-ramonas
v-ramonas requested review from a team as code owners August 20, 2026 23:17
@v-ramonas

Copy link
Copy Markdown
Contributor Author

@microsoft-github-policy-service agree company="Microsoft"

}
]
},
"Custom-AgariAPRInvestigationsLog_CL": {

@jlheard Jason Heard (jlheard) Aug 21, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This appears to be a breaking change. if we're going to remove this entire stream, we'd need to rename the DCR and do a minor version bump of the connector.

Have we tested to see if upgrading from 3.0.0 -> 3.0.1 (candidate) would work in place?

@jlheard
Jason Heard (jlheard) requested a lite review from Copilot August 21, 2026 22:20

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Promotes the Agari CCF Data Connector to GA by bumping solution/connector versions, updating connector metadata to non-preview, and adjusting the connector UX/config to focus on BP/APD streams.

Changes:

  • Bump solution and connector versions to 3.0.1 and add release note entry.
  • Mark connector as GA (isPreview: false) and update description/queries to remove APR coverage.
  • Refactor connector instructions/config for multi-tenant connections, adding friendlyName and renaming enabledPollersdataStream.

Reviewed changes

Copilot reviewed 7 out of 8 changed files in this pull request and generated 14 comments.

Show a summary per file
File Description
Solutions/Agari/ReleaseNotes.md Adds 3.0.1 release entry for GA promotion.
Solutions/Agari/Package/mainTemplate.json Version bump + GA metadata + instruction/config/template refactor.
Solutions/Agari/Data/Solution_Agari.json Updates packaged solution version to 3.0.1.
Solutions/Agari/Data Connectors/Agari_CCF/table_AgariAPRInvestigationsLog.json Removes APR investigations table definition.
Solutions/Agari/Data Connectors/Agari_CCF/Agari_PollingConfig.json Updates poller definitions for friendlyName and dataStream.
Solutions/Agari/Data Connectors/Agari_CCF/Agari_DCR.json Removes APR stream from DCR inputs/transformations.
Solutions/Agari/Data Connectors/Agari_CCF/Agari_ConnectorDefinition.json Marks GA + updates UX instructions/queries to remove APR and support multi-tenant connections.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

},
{
"name": "[[concat(parameters('innerWorkspace'),'/Microsoft.SecurityInsights/', 'BPAlertsPoller', parameters('guidValue'))]",
"name": "[[concat('parameters('workspace')', '/Microsoft.SecurityInsights/','AgariBPAlertsLog_CL' , uniqueString(parameters('friendlyName')) )]",
},
{
"name": "[[concat(parameters('innerWorkspace'),'/Microsoft.SecurityInsights/', 'APDPolicyPoller', parameters('guidValue'))]",
"name": "[[concat('parameters('workspace')', '/Microsoft.SecurityInsights/','AgariAPDPolicyLog_CL' , uniqueString(parameters('friendlyName')) )]",
},
{
"name": "[[concat(parameters('innerWorkspace'),'/Microsoft.SecurityInsights/', 'APDThreatCategoriesPoller', parameters('guidValue'))]",
"name": "[[concat('parameters('workspace')', '/Microsoft.SecurityInsights/','AgariAPDTCLog_CL' , uniqueString(parameters('friendlyName')) )]",
},
{
"name": "[[concat(parameters('innerWorkspace'),'/Microsoft.SecurityInsights/', 'BPThreatFeedSubmissionsPoller', parameters('guidValue'))]",
"name": "[[concat('parameters('workspace')', '/Microsoft.SecurityInsights/','AgariBPThreatFeedSubs_CL' , uniqueString(parameters('friendlyName')) )]",
"type": "Microsoft.SecurityInsights/dataConnectors",
"apiVersion": "2024-09-01",
"name": "BPAlertsPoller",
"name": "[[concat('parameters('workspace')', '/Microsoft.SecurityInsights/','AgariBPAlertsLog_CL' , uniqueString(parameters('friendlyName')) )]",
"dataCollectionRuleImmutableId": "{{dataCollectionRuleImmutableId}}"
},
"addOnAttributes": {
"friendlyName": "[[parameters('friendlyName')]"
},
"friendlyName": {
"defaultValue": "friendlyName",
"type": "securestring",
{
"type": "Dropdown",
"parameters": {
"label": "Data Stream",
"text": "Brand Protection Threat Feed URL Submissions (IoC)"
}
],
"isMultiSelect": true,
{
"key": "APRInvestigations",
"text": "Phishing Response Investigation Attachments"
"columnName": "API URL",
Ramon Ascencio Bribiesca (TATA CONSULTANCY SERVICES LTD) added 3 commits August 21, 2026 17:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants