GaiatopForwardAuditLogsToSplunkHEC

This automation fetches the Management Audit Logs and forwards it to be Splunk HEC.

Details

ID	`GaiatopForwardAuditLogsToSplunkHEC`
Language	python
From Version	5.0.0
Docker Image	`demisto/python3:3.12.13.9059085`

README

This automation fetches the Management Audit Logs and forwards it to be Splunk HEC.

Script Data

Name	Description
Script Type	python3

Inputs

Argument Name	Description
AuditLogCountList
CoreRestInstanceName
SplunkInstanceName

Outputs

Path	Description	Type
AuditLogs		Unknown

Source

GaiatopForwardAuditLogsToSplunkHEC.py GaiatopForwardAuditLogsToSplunkHEC.yml

Download History Raw

commonfields:
  id: GaiatopForwardAuditLogsToSplunkHEC
  version: -1
name: GaiatopForwardAuditLogsToSplunkHEC
script: '-'
type: python
tags: []
comment: This automation fetches the Management Audit Logs and forwards it to be Splunk
  HEC.
enabled: true
args:
- name: AuditLogCountList
  required: true
  description: The name of the list that holds the audit log id count.
- name: CoreRestInstanceName
  required: true
  description: The name of the Core REST API instance configured in the tenant.
- name: SplunkInstanceName
  required: true
  description: The name of the Splunk Py instance configured in the tenant.
scripttarget: 0
subtype: python3
runonce: false
dockerimage: demisto/python3:3.12.13.9059085
fromversion: "5.0.0"
runas: DBotWeakRole
tests:
- No tests (auto formatted)