Contents x
    Data Source - Cisco Amp
    • 27 Dec 2022
    • Print
    • Dark
      Light
    • PDF
    Contents

    Data Source - Cisco Amp

    • Updated on 27 Dec 2022
    • Print
    • Dark
      Light
    • PDF
    Article Summary

    Note

    This is a machine-translated version of the original Japanese article.
    Please understand that some of the information contained on this page may be inaccurate.

    Overview

    This is the help page for configuring Cisco AMP data transfer.

    Supported Protocols

    STEP 1: General Settings

    Field NamesRequiredDefault ValueDescription
    Cisco AMP Connection InformationYes-From the connection information registered in advance, select the one that has the necessary permissions for this transfer setting.
    resourceYes-Select the resource to be retrieved from the following.
    ・Event
    ・Audit log (audit_log)
    Please contact us if you would like to obtain other data types.
    start dateNo-Set the start date of the data to be searched.
    The format is (%Y-%m-%dT%H:%M:%S%z).
    Maximum paginationYes-Specify the maximum number of paginations. The number of data that can be retrieved at one time is 500 when using the API.
    Data samples for previewYes-Enter the data in the array below date as sample data for the preview process in STEP2.
    Samples are shown at the bottom of the page.
    End DateYes-[Only audit log can be specified]
    Set the start date of the data to be searched.
    The format is (%Y-%m-%dT%H:%M:%S%z).

    Example of Preview Data

    [
{
"event": "create",
"audit_log_type": "Group",
"audit_log_id": "eeaaea2b-7bcb-4263-8fb2-84a519c12940",
"audit_log_user": "16db5cf986eec6f44422",
"created_at": "2018-09-18T22:06:25Z",
"old_attributes": {
"name": null
},
"new_attributes": {
"name": "jRwlALSr"
}
},
{
"event": "update",
"audit_log_type": "Group",
"audit_log_id": "7fe7a1d5-f2e5-4348-a0d8-6dcc7b40fe66",
"audit_log_user": "16db5cf986eec6f44422",
"created_at": "2018-09-18T22:06:23Z",
"old_attributes": {
"ancestry": "577010"
},
"new_attributes": {
"ancestry": null
}
}
]
    Was this article helpful?
    What's Next