Update CarbonBlack_PollingConfig.json
This commit is contained in:
Родитель
19bc7d7780
Коммит
894d4cda5b
|
@ -15,44 +15,6 @@
|
|||
"dataCollectionEndpoint": "{{dataCollectionEndpoint}}",
|
||||
"dataCollectionRuleImmutableId": "{{dataCollectionRuleImmutableId}}"
|
||||
},
|
||||
"auth": {
|
||||
"type": "OAuth2",
|
||||
"ClientSecret": "{{clientSecret}}",
|
||||
"ClientId": "{{clientId}}",
|
||||
"TokenEndpoint": "https://id.sophos.com/api/v2/oauth2/token",
|
||||
"tokenEndpointHeaders": {
|
||||
"Accept": "application/json",
|
||||
"Content-Type": "application/x-www-form-urlencoded"
|
||||
},
|
||||
"TokenEndpointQueryParameters": {},
|
||||
"scope": "token",
|
||||
"grantType": "client_credentials"
|
||||
},
|
||||
"request": {
|
||||
"apiEndpoint": "https://api-{{sophosRegion}}.central.sophos.com/siem/v1/alerts",
|
||||
"rateLimitQPS": 10,
|
||||
"queryWindowInMin": 5,
|
||||
"httpMethod": "GET",
|
||||
"retryCount": 3,
|
||||
"timeoutInSeconds": 60,
|
||||
"queryTimeFormat": "UnixTimestamp",
|
||||
"startTimeAttributeName": "from_date",
|
||||
"headers": {
|
||||
"Accept": "application/json",
|
||||
"X-Tenant-ID": "{{sophosTenantId}}"
|
||||
}
|
||||
},
|
||||
"paging": {
|
||||
"pagingType": "NextPageToken",
|
||||
"nextPageTokenJsonPath": "$.next_cursor",
|
||||
"hasNextFlagJsonPath": "$.has_more",
|
||||
"nextPageParaName": "cursor"
|
||||
},
|
||||
"response": {
|
||||
"eventsJsonPaths": [
|
||||
"$.items"
|
||||
]
|
||||
},
|
||||
"roleArn": "{{roleArn}}",
|
||||
"sqsUrls": [
|
||||
"{{queueUrl}}"
|
||||
|
|
Загрузка…
Ссылка в новой задаче