Okta Events collector XSIAM
-

 Collects the events log for authentication and Audit provided by Okta admin API


---

* **Server URL** - The API domain URL for Okta.
* **API key** - The request API key.
* **Number of incidents to fetch per fetch** - The total number of incidents to retrieve in each fetch cycle.
* **First fetch time interval** - The period (in days) to retrieve events from, if no time is saved in the system.


## Step by step configuration

**Server URL** - `https://<domain>.com` (where `domain` is your domain name). Do **not** append `/api/v1/logs` to the URL; the integration adds it automatically. To get help finding your domain, see:
[https://developer.okta.com/docs/guides/find-your-domain/main/](https://developer.okta.com/docs/guides/find-your-domain/main/)
**API key** - your API key
**Number of incidents to fetch per fetch** - 10000
**Events fetch interval** - 01 Minutes
**Fetches events** - True