category: Analytics & SIEM
provider: HPE
sectionorder:
- Connect
- Collect
commonfields:
  id: HPEArubaCentralEventCollector
  version: -1
configuration:
- display: Server URL
  name: url
  required: true
  type: 0
  section: Connect
  additionalinfo: The region-specific Base URL for the Aruba Central API Gateway.
- name: auth_method
  required: false
  type: 15
  section: Connect
  additionalinfo: 'The authentication method to use. "Access Token": paste the token JSON downloaded from the Aruba Central UI. "Basic Auth": provide a Username, Password, and Customer ID.'
  display: Authentication Method
  defaultvalue: Basic Auth
  options:
  - Access Token
  - Basic Auth
- name: credentials
  display: Client ID
  required: true
  type: 9
  displaypassword: Client Secret
  section: Connect
  hiddenusername: false
  additionalinfo: The secret key associated with your Client ID for API authentication. Can be obtained via the APIs page in the product.
- name: token
  display: ""
  required: false
  type: 9
  displaypassword: Access Token (JSON)
  section: Connect
  hiddenusername: true
  additionalinfo: 'The full token JSON downloaded from the Aruba Central UI. Required when Authentication Method is "Access Token".'
- name: customer_id
  type: 9
  required: false
  section: Connect
  displaypassword: Customer ID
  hiddenusername: true
  additionalinfo: The unique identifier for your Aruba Central account. Can be obtained via the APIs page in the product. Required only when Authentication Method is "Basic Auth".
- section: Connect
  display: Username
  name: user
  required: false
  type: 9
  displaypassword: Password
  hiddenusername: false
  additionalinfo: The username and password of an Aruba Central account with at least read-only privileges. Required only when Authentication Method is "Basic Auth".
- section: Collect
  display: Fetch Events
  name: isFetchEvents
  required: false
  type: 8
- section: Collect
  display: Events Fetch Interval
  name: eventFetchInterval
  required: false
  type: 19
  advanced: true
- section: Collect
  display: Fetch networking events
  name: fetch_networking_events
  required: false
  type: 8
- display: The maximum number of audit events per fetch
  name: max_audit_events_per_fetch
  required: false
  type: 0
  section: Collect
  advanced: true
  defaultvalue: '100'
- display: The maximum number of networking events per fetch
  name: max_networking_events_per_fetch
  required: false
  type: 0
  section: Collect
  advanced: true
  defaultvalue: '5000'
- display: Trust any certificate (not secure)
  name: insecure
  required: false
  type: 8
  section: Connect
  advanced: true
- display: Use system proxy settings
  name: proxy
  required: false
  type: 8
  section: Connect
  advanced: true
description: This is the Aruba Central event collector integration for Cortex XSIAM.
display: HPE Aruba Central Event Collector
name: HPEArubaCentralEventCollector
script:
  commands:
  - arguments:
    - auto: PREDEFINED
      defaultValue: 'false'
      description: If true, the command will create events, otherwise it will only display them.
      isArray: false
      name: should_push_events
      predefined:
      - 'true'
      - 'false'
      required: true
    - default: false
      description: Maximum number of results to return.
      isArray: false
      name: limit
      required: true
      secret: false
    - default: false
      description: Date from which to get events.
      name: from_date
      required: false
    deprecated: false
    description: Gets events from Aruba Central.
    execution: false
    name: aruba-central-get-events
  - description: Use this command to test the connectivity of the HPE Aruba Central instance.
    name: aruba-auth-test
    execution: false
    deprecated: false
  dockerimage: demisto/python3:3.12.13.10404775
  isfetchevents: true
  runonce: false
  script: '-'
  subtype: python3
  type: python
marketplaces:
- marketplacev2
- platform
fromversion: 8.4.0
tests:
- No tests (auto formatted)
supportedModules:
- xsiam
triggers:
- conditions:
  - name: auth_method
    operator: equal
    value: Access Token
  effects:
  - name: token
    action:
      required: true
  - name: user
    action:
      hidden: true
  - name: customer_id
    action:
      hidden: true
- conditions:
  - name: auth_method
    operator: equal
    value: Basic Auth
  effects:
  - name: token
    action:
      hidden: true
  - name: user
    action:
      required: true
  - name: customer_id
    action:
      required: true