[Cisco Meraki REST API Connector] - Fix Cisco Meraki File Scanned event ingestion

[v-dhbedu_microsoft (dhanunjaya1054)]

Change(s):

• Added File Scanned event ingestion through a dedicated  CiscoMerakiFileScannedEvents_CL  custom table and DCR data flow.

• Preserved IDS/security-event ingestion to  ASimNetworkSessionLogs  while excluding File Scanned events from that ASIM stream.

• Corrected File Scanned schema/type handling, including emitting  EventCount  as a string to match the destination table schema.

• Restored  DvcAction  mapping for security events based on the Meraki  blocked  field.

• Added API Request query-string handling to preserve the complete original URL.

• Improved Configuration Changes field mapping with admin-name and SSID-context fallbacks.

• Restored the Configuration Changes poller checkpoint window from 90 days to the original 5 minutes.

• Regenerated  Package\3.2.1.zip  so the package contains the current  mainTemplate.json  and  createUiDefinition.json .

• Removed the unintended  SESSION_PROGRESS.md  file from the solution content.

  Reason for Change(s):

  • These changes resolve Cisco Meraki connector ingestion issues reported for File Scanned events while preserving IDS Alert ingestion. The dedicated File Scanned stream prevents incompatible event schemas from being sent to ASIM Network Session logs, and the corrected DCR conversions prevent ingestion-time type errors. The Configuration Changes window was restored to its original five-minute checkpoint interval to avoid repeatedly querying an unnecessarily large 90-day period

Version:
- 3.2.1

Testing Completed:
Yes

[Copilot]

Note

Copilot was unable to run its full agentic suite in this review.

Pull request overview

Updates the Cisco Meraki REST API connector package to v3.2.1, adding dedicated ingestion for “File Scanned” security events and updating connector metadata/queries accordingly.

Changes:

• Bumped solution/connector versions to 3.2.1 and updated release notes.
• Added a dedicated custom table and DCR stream/transform for “File Scanned” events, separating them from ASimNetworkSessionLogs.
• Updated connector definition UX elements (description, graph queries, sample queries, selectable data types) and extended transformation fields (e.g., queryString/adminName/SSID context).

Reviewed changes

Copilot reviewed 7 out of 8 changed files in this pull request and generated 7 comments.

Show a summary per file

File	Description
Solutions/Cisco Meraki Events via REST API/ReleaseNotes.md	Adds a 3.2.1 release note entry describing regression fixes and File Scanned event separation.
Solutions/Cisco Meraki Events via REST API/Package/mainTemplate.json	Version bump plus core connector updates: new File Scanned table, new data connector instance, and updated transforms/queries.
Solutions/Cisco Meraki Events via REST API/Data/Solution_Cisco Meraki Events via REST API.json	Updates solution version to 3.2.1 for packaging metadata.
Solutions/Cisco Meraki Events via REST API/Data Connectors/CiscoMerakiMultiRule_ccp/table_CiscoMerakiFileScannedEvents.json	Introduces the custom Log Analytics table schema for File Scanned events.
Solutions/Cisco Meraki Events via REST API/Data Connectors/CiscoMerakiMultiRule_ccp/CiscoMeraki_dcr.json	Adds DCR stream/columns and transform routing for File Scanned vs other security events.
Solutions/Cisco Meraki Events via REST API/Data Connectors/CiscoMerakiMultiRule_ccp/CiscoMeraki_PollerConfig.json	Adds a new poller definition for File Scanned events and tweaks polling window for configuration changes.
Solutions/Cisco Meraki Events via REST API/Data Connectors/CiscoMerakiMultiRule_ccp/CiscoMeraki_ConnectorDefinition.json	Updates connector metadata/graphs/sample queries and exposes File Scanned as a selectable data type.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.