CiscoWebexEventCollector

Cisco Webex Event Collector fetches Events and Admin Audit Events and Security Audit Events.

Category

Analytics & SIEM

Pack

CiscoSpark

Configuration parameters

• base_url — URL (required)
• admin_credentials — Admin APP Client ID (required)
• admin_app_redirect_uri — Admin APP Redirect URI (required)
• admin_org_id — Admin Org Id (required)
• compliance_officer_credentials — Compliance Officer Client ID (required)
• compliance_officer_redirect_uri — Compliance Officer Redirect URI (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• fetch_security_audit_events — Fetch security audit events
• max_fetch — Maximum number of events per fetch

Commands (6)

• cisco-webex-get-admin-audit-events — Gets admin audit events from Cisco Webex.
• cisco-webex-get-compliance-officer-events — Gets events from Cisco Webex.
• cisco-webex-get-security-audit-events — Gets security audit events from Cisco Webex.
• cisco-webex-oauth-complete — Use this command to complete the authorization process. After copying the authorization code found in the query parameter `code` of the callback URL, paste the value in the command as an argument to finish the process.
• cisco-webex-oauth-start — Use this command to start the authorization process. In order to authorize the instance, first run the command, and complete the process in the URL that is returned. You will then be redirected to the callback URL where you will copy the authorization code found in the query parameter `code`, and paste that value in the command `!cisco-webex-oauth-complete` as an argument to finish the process.
• cisco-webex-oauth-test — Use this command to complete the authorization process. After copying the authorization code found in the query parameter `code` of the callback URL, paste the value in the command as an argument to finish the process.