Update CarbonBlack_PollingConfig.json
This commit is contained in:
Родитель
19bc7d7780
Коммит
894d4cda5b
|
@ -15,44 +15,6 @@
|
||||||
"dataCollectionEndpoint": "{{dataCollectionEndpoint}}",
|
"dataCollectionEndpoint": "{{dataCollectionEndpoint}}",
|
||||||
"dataCollectionRuleImmutableId": "{{dataCollectionRuleImmutableId}}"
|
"dataCollectionRuleImmutableId": "{{dataCollectionRuleImmutableId}}"
|
||||||
},
|
},
|
||||||
"auth": {
|
|
||||||
"type": "OAuth2",
|
|
||||||
"ClientSecret": "{{clientSecret}}",
|
|
||||||
"ClientId": "{{clientId}}",
|
|
||||||
"TokenEndpoint": "https://id.sophos.com/api/v2/oauth2/token",
|
|
||||||
"tokenEndpointHeaders": {
|
|
||||||
"Accept": "application/json",
|
|
||||||
"Content-Type": "application/x-www-form-urlencoded"
|
|
||||||
},
|
|
||||||
"TokenEndpointQueryParameters": {},
|
|
||||||
"scope": "token",
|
|
||||||
"grantType": "client_credentials"
|
|
||||||
},
|
|
||||||
"request": {
|
|
||||||
"apiEndpoint": "https://api-{{sophosRegion}}.central.sophos.com/siem/v1/alerts",
|
|
||||||
"rateLimitQPS": 10,
|
|
||||||
"queryWindowInMin": 5,
|
|
||||||
"httpMethod": "GET",
|
|
||||||
"retryCount": 3,
|
|
||||||
"timeoutInSeconds": 60,
|
|
||||||
"queryTimeFormat": "UnixTimestamp",
|
|
||||||
"startTimeAttributeName": "from_date",
|
|
||||||
"headers": {
|
|
||||||
"Accept": "application/json",
|
|
||||||
"X-Tenant-ID": "{{sophosTenantId}}"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
"paging": {
|
|
||||||
"pagingType": "NextPageToken",
|
|
||||||
"nextPageTokenJsonPath": "$.next_cursor",
|
|
||||||
"hasNextFlagJsonPath": "$.has_more",
|
|
||||||
"nextPageParaName": "cursor"
|
|
||||||
},
|
|
||||||
"response": {
|
|
||||||
"eventsJsonPaths": [
|
|
||||||
"$.items"
|
|
||||||
]
|
|
||||||
},
|
|
||||||
"roleArn": "{{roleArn}}",
|
"roleArn": "{{roleArn}}",
|
||||||
"sqsUrls": [
|
"sqsUrls": [
|
||||||
"{{queueUrl}}"
|
"{{queueUrl}}"
|
||||||
|
|
Загрузка…
Ссылка в новой задаче