Duo Event Collector

Collects Auth and Audit events for Duo using the API.

Analytics & SIEM · DUO Admin

Configuration parameters

  • host — Server Host (required)
  • after — First fetch timestamp (<number> <time unit>, for example, 12 hours, 7 days, 3 months, 1 year) (required)
  • integration_key — Integration key (required)
  • secret_key — (required)
  • limit — XSIAM request limit (required)
  • retries — Request retries
  • logs_type_array — APIs to use
  • proxy — Use system proxy settings
  • fetch_delay — End of the fetch window

Commands (1)

  • duo-get-events

    Manual command to fetch events and display them.