category: Analytics & SIEM
provider: Celonis
sectionorder:
- Connect
- Collect
commonfields:
  id: CelonisEventCollector
  version: -1
configuration:
- defaultvalue: https://<teamname>.<realm>.celonis.cloud
  additionalinfo: "The endpoint URL is constructed using the team name and realm in the format: https://<teamname>.<realm>.celonis.cloud."
  display: Server URL
  name: url
  required: true
  type: 0
  section: Connect
- additionalinfo: The Client Credentials to use for connection.
  displaypassword: Client Secret
  display: Client ID
  name: credentials
  required: true
  type: 9
  section: Connect
- display: Trust any certificate (not secure)
  name: insecure
  required: false
  type: 8
  section: Connect
  advanced: true
- display: Use system proxy settings
  name: proxy
  required: false
  type: 8
  section: Connect
  advanced: true
- display: Fetch events
  name: isFetchEvents
  type: 8
  section: Collect
  required: false
  hidden:
  - xsoar
  defaultvalue: "true"
- additionalinfo: 'Defines the maximum number of audits events per fetch cycle. Default value: 600.'
  defaultvalue: "600"
  display: Maximum number of events per fetch
  name: max_events_per_fetch
  required: true
  type: 0
  section: Collect
  advanced: true
description: 'The Celonis Platform offers you a suite of process mining and intelligence features, helping you to integrate your data and then use that data to analyze, improve, and monitor your business performance across key metrics.'
display: Celonis
name: CelonisEventCollector
script:
  commands:
  - name: celonis-get-events
    description: Retrieves a list of audit logs events from the Celonis instance.
    arguments:
      - auto: PREDEFINED
        defaultValue: 'false'
        description: Set this argument to true in order to create events, otherwise it will only display them.
        name: should_push_events
        predefined:
          - 'true'
          - 'false'
        required: true
      - description: 'Maximum number of events to return.'
        name: limit
        required: true
      - description: 'The starting date from which events should be fetched. The date should be in the format "YYYY-MM-DDTHH:MM:SS.sssZ". Example: 2025-02-04T10:33:24.647Z.'
        name: start_date
        required: true
      - description: 'The date up to which events should be fetched. The date should be in the format "YYYY-MM-DDTHH:MM:SS.sssZ". Example: 2025-02-04T10:33:24.647Z.'
        name: end_date
        required: true
    outputs:
      - contextPath: Celonis.Audit
        description: The list of audit logs events.
        type: List
  isfetch: false
  runonce: false
  script: '-'
  type: python
  subtype: python3
  isfetchevents: true
  dockerimage: demisto/python3:3.12.13.10116658
fromversion: 6.10.0
marketplaces:
- marketplacev2
- platform
tests:
- No tests (auto formatted)
supportedModules:
- xsiam