RunZero Event Collector

This is the RunZero event collector integration for XSIAM.

Analytics & SIEM · RunZero

Configuration parameters

  • url — Server URL (required)
  • client_id — Client ID (required)
  • client_secret — (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • isFetch — Fetch incidents
  • max_fetch — Max events per fetch
  • first_fetch — First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days)

Commands (1)

  • runzero-get-events

    Gets events from RunZero.