Data Source - Cisco Secure Endpoint
    • PDF

    Data Source - Cisco Secure Endpoint

    • PDF

    Article summary

    summary

    Help Page for ETL Configuration of Cisco Secure Endpoint Data Settings.

    Setting items

    STEP1 Basic settings

    item nameindispensabledefault valueContents
    Cisco Secure Endpoint Connection ConfigurationYes-Select the previously registered Connection Configuration that has the necessary permissions for this ETL Configuration.
    ResourcesYes-Select the resource to be acquired from the following
    Event (EVENT)
    Audit log (audit_log)
    Start DateNo-Please set the starting date of the Data Setting to be searched.
    The format is (%Y-%m-%dT%H:%M:%S%z).
    Maximum number of paginationsYes-Specify the maximum number of paginations. The number of data that can be retrieved at one time is limited to 500 due to the use of the API.
    Sample data for previewYes-Enter the data in the following array of date as sample data for the preview process in STEP 2.
    Samples are shown at the bottom of the page.
    End DateYes-Only audit logs can be specified.
    Please set the starting date of the Data Setting to be searched.
    The format is (%Y-%m-%dT%H:%M:%S%z).

    Example of data sample for preview

    [
    {
    "event": "create",
    "audit_log_type": "Group",
    "audit_log_id": "eeaaea2b-7bcb-4263-8fb2-84a519c12940",
    "audit_log_user": "16db5cf986eec6f44422",
    "created_at": "2018-09-18T22:06:25Z",
    "old_attributes": {
    "name": null
    },
    "new_attributes": {
    "name": "jRwlALSr"
    }
    },
    {
    "event": "update",
    "audit_log_type": "Group",
    "audit_log_id": "7fe7a1d5-f2e5-4348-a0d8-6dcc7b40fe66",
    "audit_log_user": "16db5cf986eec6f44422",
    "created_at": "2018-09-18T22:06:23Z",
    "old_attributes": {
    "ancestry": "577010"
    },
    "new_attributes": {
    "ancestry": null
    }
    }
    ]
    

    Was this article helpful?