CyberArkEPMEventCollector

CyberArk EPM Event Collector fetches events.

Analytics & SIEM · CyberArk Endpoint Privilege Manager

Configuration parameters

  • url — SAML/EPM Logon URL (required)
  • credentials — Username (required)
  • set_name — Set name (required)
  • application_id — Application ID
  • authentication_url — Authentication URL
  • application_url — Application URL
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • max_fetch — Maximum number of events per fetch
  • enable_admin_audits — Enable admin audits events
  • policy_audits_event_type — Policy Audit Events
  • raw_events_event_type — Detailed Events

Commands (3)

  • cyberarkepm-get-admin-audits

    Gets admin audits from Cyber Ark EPM.

  • cyberarkepm-get-events

    Gets events from Cyber Ark EPM.

  • cyberarkepm-get-policy-audits

    Gets policy audits from Cyber Ark EPM.