Duo Event Collector

Collects Auth and Audit events for Duo using the API.

Category

Analytics & SIEM

Pack

DuoAdminApi

Configuration parameters

• host — Server Host (required)
• after — First fetch timestamp (<number> <time unit>, for example, 12 hours, 7 days, 3 months, 1 year) (required)
• integration_key — Integration key (required)
• secret_key — (required)
• limit — XSIAM request limit (required)
• retries — Request retries
• logs_type_array — APIs to use
• proxy — Use system proxy settings
• fetch_delay — End of the fetch window

Commands (1)

• duo-get-events — Manual command to fetch events and display them.