Azure IP Ranges and Service Tags – Public Cloud from json

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Azure IP Ranges and Service Tags – Public Cloud from json

L0 Member

 

 

What configuration to use to get these Azure Services in own output nodes?

 

https://www.microsoft.com/en-us/download/confirmation.aspx?id=56519

4 REPLIES 4

L5 Sessionator

Hi @TommiK,

 

the following SimpleJSON class based prototype is doing the job for me.

 

age_out:
    default: null
    interval: 257
    sudden_death: true
attributes:
    confidence: 100
    share_level: green
    type: IPv4
extractor: values[].properties.addressPrefixes[].{indicator:@}
prefix: azure
source_name: azure
url: https://download.microsoft.com/download/7/1/D/71D86715-5596-4529-9B13-DA13A5DE5B63/ServiceTags_Public_20181001.json

If you want to mine prefixes for specific system services then you'll have to adjust the JMESPath expression to suit your needs.

 

Ok, thanks for the info, with correct link it will work. Seems that the problem is with that link, it's not "static".

 

Current link: https://download.microsoft.com/download/7/1/D/71D86715-5596-4529-9B13-DA13A5DE5B63/ServiceTags_Publi...

 

File has date 20181001 included, so I assume that it will change.

Hi @TommiK,

 

you're right. The backend file name will change overnight without previous notification. Time ago I build the MS Article for MineMeld that can dynamically extract references in MS Articles and download them. It currently wraps the CSVFT class so only works for CSV formated downloads.

 

Someone could be interested on contributing to the extension to create a SimpleJSON wrapper as well.

L0 Member

Hello PA community,

One of the guys at our company made a script to help with this, here's the github repo he decided to make public

https://github.com/enzo-g/azureIPranges

  • 10165 Views
  • 4 replies
  • 0 Likes
  • 101 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!