GenericAPIEventCollector
Collect logs from 3rd party vendors using API.
- Category
- Analytics & SIEM
- Pack
- GenericAPIEventCollector
Configuration parameters
- base_url — Server URL (required)
- endpoint — Endpoint (required)
- authentication — Authentication Type (required)
- http_method — HTTP Method (required)
- token —
- credentials — Username
- add_fields_to_header — Add Fields To header
- proxy — Use system proxy settings
- insecure — Trust any certificate (not secure)
- vendor — Vendor (required)
- product — Product (required)
- request_data — Request data
- initial_request_data — Initial request data
- request_json — Request JSON parameters
- initial_request_json — Initial request JSON parameters
- query_params — Query parameters
- initial_query_params — Initial query parameters
- pagination_needed — Is pagination needed
- pagination_field_name — Pagination field name
- pagination_flag — Pagination flag
- timestamp_format — Timestamp format of the event creation time or "epoch".
- timestamp_field_name — Timestamp field (required)
- events_keys — Events lookup path in the response JSON, dot-separated, e.g. ,"data.items".
- id_keys — Event ID lookup path in the event response JSON, dot-separated, e.g., "id".
- id_type — The type of ID field, either "integer" or "string"
- ok_codes — Allowed HTTP status codes for successful response from the API
- limit — Number of incidents to fetch per fetch.
- isFetchEvents — Fetch Events
- eventFetchInterval — Events Fetch Interval
Commands (1)
- generic-api-event-collector-get-events — Gets events from 3rd party vendor.