Data Source - Cisco Secure Endpoint

Prev Next

summary

Help Page for ETL Configuration of Cisco Secure Endpoint Data Settings.

Setting items

STEP1 Basic settings

item name indispensable default value Contents
Cisco Secure Endpoint Connection Configuration Yes - Select the previously registered Connection Configuration that has the necessary permissions for this ETL Configuration.
Resources Yes - Select the resource to be acquired from the following
Event (EVENT)
Audit log (audit_log)
Start Date No - Please set the starting date of the Data Setting to be searched.
The format is (%Y-%m-%dT%H:%M:%S%z).
Maximum number of paginations Yes - Specify the maximum number of paginations. The number of data that can be retrieved at one time is limited to 500 due to the use of the API.
Sample data for preview Yes - Enter the data in the following array of date as sample data for the preview process in STEP 2.
Samples are shown at the bottom of the page.
End Date Yes - Only audit logs can be specified.
Please set the starting date of the Data Setting to be searched.
The format is (%Y-%m-%dT%H:%M:%S%z).

Example of data sample for preview

[
{
"event": "create",
"audit_log_type": "Group",
"audit_log_id": "eeaaea2b-7bcb-4263-8fb2-84a519c12940",
"audit_log_user": "16db5cf986eec6f44422",
"created_at": "2018-09-18T22:06:25Z",
"old_attributes": {
"name": null
},
"new_attributes": {
"name": "jRwlALSr"
}
},
{
"event": "update",
"audit_log_type": "Group",
"audit_log_id": "7fe7a1d5-f2e5-4348-a0d8-6dcc7b40fe66",
"audit_log_user": "16db5cf986eec6f44422",
"created_at": "2018-09-18T22:06:23Z",
"old_attributes": {
"ancestry": "577010"
},
"new_attributes": {
"ancestry": null
}
}
]