NetskopeAPIv1
Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1.
- Category
- Network Security
- Pack
- Netskope
Configuration parameters
- url — Server URL (required)
- credentials — (required)
- max_fetch — Maximum incidents per fetch. Max value is 200. (required)
- first_fetch — First fetch timestamp (<number> <time unit>, like 12 hours, 7 days)
- alerts_query — Alerts Query
- fetch_events — Fetch Events
- event_types — Event types to fetch.
- max_events_fetch — Maximum events as incidents per fetch. Max value is 200.
- events_query — Events Query
- incidentType — Incident type
- incidentFetchInterval — Incidents Fetch Interval
- isFetch — Fetch incidents
- insecure — Trust any certificate (not secure)
- proxy — Use system proxy settings
Commands (10)
- netskope-alert-list — Get alerts generated by Netskope, including policy, DLP, and watch list alerts. You must provide start_time and end_time, or insertion_start_time and insertion_end_time, or timeperiod. Also, you cannot provide a combination of the options mentioned above.
- netskope-client-list — Get information about the Netskope clients.
- netskope-event-list — Get events extracted from SaaS traffic and or logs. You must provide start_time and end_time, or insertion_start_time and insertion_end_time, or timeperiod. Also, you cannot provide a combination of the options mentioned above.
- netskope-file-hash-list-update — Update file hash list with the values provided. The command will override the whole list content, rather than appending the new values.
- netskope-host-associated-user-list — List all users of certain host by its hostname.
- netskope-quarantined-file-get — Download a quarantined file.
- netskope-quarantined-file-list — List all quarantined files.
- netskope-quarantined-file-update — Take an action on a quarantined file.
- netskope-url-list-update — Update the URL List with the values provided. The command will override the whole list content, rather than appending the new values.
- netskope-user-associated-host-list — List all hosts related to a certain username.