GenericAPIEventCollector
Collect logs from 3rd party vendors using API.
Analytics & SIEM · GenericAPIEventCollector
Configuration parameters
base_url— Server URL (required)endpoint— Endpoint (required)authentication— Authentication Type (required)http_method— HTTP Method (required)token—credentials— Usernameadd_fields_to_header— Add Fields To headerproxy— Use system proxy settingsinsecure— Trust any certificate (not secure)vendor— Vendor (required)product— Product (required)request_data— Request datainitial_request_data— Initial request datarequest_json— Request JSON parametersinitial_request_json— Initial request JSON parametersquery_params— Query parametersinitial_query_params— Initial query parameterspagination_needed— Is pagination neededpagination_field_name— Pagination field namepagination_flag— Pagination flagtimestamp_format— Timestamp format of the event creation time or "epoch".timestamp_field_name— Timestamp field (required)events_keys— Events lookup path in the response JSON, dot-separated, e.g. ,"data.items".id_keys— Event ID lookup path in the event response JSON, dot-separated, e.g., "id".id_type— The type of ID field, either "integer" or "string"ok_codes— Allowed HTTP status codes for successful response from the APIlimit— Number of incidents to fetch per fetch.isFetchEvents— Fetch EventseventFetchInterval— Events Fetch Interval
Commands (1)
-
generic-api-event-collector-get-eventsGets events from 3rd party vendor.