NetskopeAPIv1
Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1.
Network Security · Netskope
Configuration parameters
url— Server URL (required)credentials— (required)max_fetch— Maximum incidents per fetch. Max value is 200. (required)first_fetch— First fetch timestamp (<number> <time unit>, like 12 hours, 7 days)alerts_query— Alerts Queryfetch_events— Fetch Eventsevent_types— Event types to fetch.max_events_fetch— Maximum events as incidents per fetch. Max value is 200.events_query— Events QueryincidentType— Incident typeisFetch— Fetch incidentsinsecure— Trust any certificate (not secure)proxy— Use system proxy settings
Commands (10)
-
netskope-alert-listGet alerts generated by Netskope, including policy, DLP, and watch list alerts. You must provide start_time and end_time, or insertion_start_time and insertion_end_time, or timeperiod. Also, you cannot provide a combination of the options mentioned above.
-
netskope-client-listGet information about the Netskope clients.
-
netskope-event-listGet events extracted from SaaS traffic and or logs. You must provide start_time and end_time, or insertion_start_time and insertion_end_time, or timeperiod. Also, you cannot provide a combination of the options mentioned above.
-
netskope-file-hash-list-updateUpdate file hash list with the values provided. The command will override the whole list content, rather than appending the new values.
-
netskope-host-associated-user-listList all users of certain host by its hostname.
-
netskope-quarantined-file-getDownload a quarantined file.
-
netskope-quarantined-file-listList all quarantined files.
-
netskope-quarantined-file-updateTake an action on a quarantined file.
-
netskope-url-list-updateUpdate the URL List with the values provided. The command will override the whole list content, rather than appending the new values.
-
netskope-user-associated-host-listList all hosts related to a certain username.