Update CarbonBlack_PollingConfig.json

This commit is contained in:
PrasadBoke 2024-11-21 14:12:25 +05:30
Родитель 19bc7d7780
Коммит 894d4cda5b
1 изменённых файлов: 0 добавлений и 38 удалений

Просмотреть файл

@ -15,44 +15,6 @@
"dataCollectionEndpoint": "{{dataCollectionEndpoint}}", "dataCollectionEndpoint": "{{dataCollectionEndpoint}}",
"dataCollectionRuleImmutableId": "{{dataCollectionRuleImmutableId}}" "dataCollectionRuleImmutableId": "{{dataCollectionRuleImmutableId}}"
}, },
"auth": {
"type": "OAuth2",
"ClientSecret": "{{clientSecret}}",
"ClientId": "{{clientId}}",
"TokenEndpoint": "https://id.sophos.com/api/v2/oauth2/token",
"tokenEndpointHeaders": {
"Accept": "application/json",
"Content-Type": "application/x-www-form-urlencoded"
},
"TokenEndpointQueryParameters": {},
"scope": "token",
"grantType": "client_credentials"
},
"request": {
"apiEndpoint": "https://api-{{sophosRegion}}.central.sophos.com/siem/v1/alerts",
"rateLimitQPS": 10,
"queryWindowInMin": 5,
"httpMethod": "GET",
"retryCount": 3,
"timeoutInSeconds": 60,
"queryTimeFormat": "UnixTimestamp",
"startTimeAttributeName": "from_date",
"headers": {
"Accept": "application/json",
"X-Tenant-ID": "{{sophosTenantId}}"
}
},
"paging": {
"pagingType": "NextPageToken",
"nextPageTokenJsonPath": "$.next_cursor",
"hasNextFlagJsonPath": "$.has_more",
"nextPageParaName": "cursor"
},
"response": {
"eventsJsonPaths": [
"$.items"
]
},
"roleArn": "{{roleArn}}", "roleArn": "{{roleArn}}",
"sqsUrls": [ "sqsUrls": [
"{{queueUrl}}" "{{queueUrl}}"