ArmisEventCollector

Collects alerts, devices and activities from Armis resources.

Analytics & SIEM · Armis

Configuration parameters

  • server_url — Server URL (required)
  • credentials — (required)
  • max_fetch — Maximum number of events per fetch
  • devices_max_fetch — Maximum number of device events per fetch
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • event_types_to_fetch — Event types to fetch (required)
  • eventFetchInterval — Events Fetch Interval
  • fetch_delay — Minutes to delay
  • deviceFetchInterval — Device Fetch Interval

Commands (1)

  • armis-get-events

    Manual command to fetch and display events. This command is used for developing/debugging and is to be used with caution, as it can create events, leading to events duplication and exceeding the API request limitation.