name: BoxEventsCollector
display: Box Event Collector
description: Collect events from Box's logs.
category: Analytics & SIEM
provider: Box
supportlevelheader: xsoar
sectionorder:
- Connect
- Collect
commonfields:
  id: BoxEventsCollector
  version: -1
configuration:
- display: "Server URL"
  name: url
  type: 0
  required: true
  defaultvalue: 'https://api.box.com'
  additionalinfo: "The url of the box api"
  section: Connect
- display: ""
  name: credentials_json
  type: 9
  required: true
  displaypassword: Credentials JSON
  hiddenusername: true
  section: Connect
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  section: Connect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
- display: Fetch Events
  name: isFetchEvents
  type: 8
  required: false
  section: Collect
- defaultvalue: 1 days
  display: |-
    First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days)
  name: created_after
  type: 0
  required: false
  section: Collect
- display: Maximum number of events per fetch
  name: max_events_per_fetch
  type: 0
  defaultvalue: '2500'
  required: false
  additionalinfo: "The maximum total number of events to fetch per fetch cycle (max 5000; higher values are capped). If you're encountering fetch timeouts on a high-volume backlog, decrease this value."
  section: Collect
- display: Events Fetch Interval
  name: eventFetchInterval
  type: 19
  defaultvalue: '1'
  required: false
  section: Collect
  advanced: true
script:
  commands:
  - arguments:
    - description: The maximum total number of events to fetch.
      name: limit
      defaultValue: 10
    - description: Should push events.
      name: should_push_events
      defaultValue: 'false'
    - description: Fetch events from this time (<number> <time unit>, e.g., 12 hours, 7 days).
      name: created_after
      defaultValue: 3 days
    description: Gets events from Box. Use this command for development and debugging only, as it may produce duplicate events, exceed API rate limits, or disrupt the fetch mechanism.
    name: box-get-events
  dockerimage: demisto/auth-utils:1.0.0.11206988
  runonce: false
  script: '-'
  subtype: python3
  type: python
  isfetchevents: true
marketplaces:
- marketplacev2
- platform
tests:
- No tests
fromversion: 6.6.0
supportedModules:
- xsiam