Akamai WAF SIEM

Use the Akamai WAF SIEM integration to retrieve security events from Akamai Web Application Firewall (WAF) service.

Category

Analytics & SIEM

Pack

Akamai_SIEM

Configuration parameters

• host — Server URL (e.g., https://akaa-xxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxx.luna.akamaiapis.net) (required)
• clientToken — Client token
• clienttoken_creds —
• accessToken — Access token
• accesstoken_creds —
• clientSecret — Client secret
• clientsecret_creds —
• configIds — Config IDs to fetch (required)
• incidentType — Incident type
• fetchTime — First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days)
• fetchLimit — Incident fetch limit
• eventsFetchLimit — Events fetch limit
• isFetch — Fetch incidents
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• incidentFetchInterval — Incidents Fetch Interval
• eventFetchInterval — Events Fetch Interval
• isFetchEvents — Fetch Events
• should_skip_decode_events — Skip events decoding
• longRunning — Long running instance
• beta_page_size — Page Size - high performance mode
• max_concurrent_tasks — Max allowed concurrent tasks

Commands (2)

• akamai-siem-get-events — Get security events from Akamai WAF.
• akamai-siem-reset-offset — Reset the last offset to start fetching from the first fetch timestamp, use this command when the instance is disabled.