SaaS Security Event Collector

Palo Alto Networks SaaS Security Event Collector integration for XSIAM.

Category

Analytics & SIEM

Pack

PrismaSaasSecurity

Configuration parameters

• url — Your server URL (required)
• credentials — Client ID (required)
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings
• max_fetch — The maximum number of events per fetch.
• max_iterations — The maximum number of iterations to retrieve events
• event_fetch_concurrency — Number of concurrent fetch requests
• event_pass_over_empty_response — Treat an empty Cortex XSIAM response as delivered

Commands (1)

• saas-security-get-events — Manual command to fetch events and display them. Use this command for development and debugging only, as it may produce duplicate events, exceed API rate limits, or disrupt the fetch mechanism.