category: Email
provider: Francisco Partners
sectionorder:
- Connect
- Collect
commonfields:
  id: Forcepoint DLP Event Collector
  version: -1
configuration:
- display: Server URL (e.g., https://<DLP Manager IP>:<DLP Manager port>/)
  name: url
  required: true
  type: 0
  section: Connect
- display: Username
  name: credentials
  required: true
  type: 9
  section: Connect
- defaultvalue: '10000'
  display: Maximum number of events per fetch
  name: max_fetch
  required: false
  type: 0
  section: Collect
- display: First fetch
  name: first_fetch
  required: false
  type: 0
  section: Collect
  hidden: true
- display: Trust any certificate (not secure)
  name: insecure
  required: false
  type: 8
  section: Connect
  advanced: true
- display: Use system proxy settings
  name: proxy
  required: false
  type: 8
  section: Connect
  advanced: true
description: Use this integration to fetch security incidents from Forcepoint DLP as Cortex XSIAM events.
display: Forcepoint DLP Event Collector (Beta)
name: Forcepoint DLP Event Collector
beta: true
script:
  commands:
  - arguments:
    - default: false
      description: The number of events to return.
      isArray: false
      name: limit
      defaultValue: 10
      required: false
      secret: false
    - default: false
      defaultValue: 3 days
      description: The start time by which to filter events. Date format will be the same as in the first_fetch parameter.
      isArray: false
      name: since_time
      required: false
      secret: false
    - auto: PREDEFINED
      defaultValue: 'false'
      description: Set this argument to True in order to create events, otherwise the command will only display them.
      isArray: false
      name: should_push_events
      predefined:
      - 'true'
      - 'false'
      required: true
    description: Gets security events from Forcepoint DLP.
    name: forcepoint-dlp-get-events
  dockerimage: demisto/python3:3.12.13.10116658
  isfetchevents: true
  runonce: false
  script: ''
  subtype: python3
  type: python
fromversion: 8.2.0
marketplaces:
- marketplacev2
- platform
tests:
- No tests (auto formatted)
supportedModules:
- xsiam