CyberArkIdentityEventCollector.yml

category: Analytics & SIEM
sectionOrder:
- Connect
- Collect
commonfields:
  id: CyberArk Identity Event Collector
  version: -1
configuration:
- defaultvalue: https://<tenant>.my.idaptive.app
  display: Server URL
  name: url
  required: true
  type: 0
  section: Connect
- defaultvalue: oauthsiem
  display: App ID
  name: app_id
  required: true
  type: 0
  section: Collect
- display: User name
  additionalinfo: The user name (admin@example.com) and password.
  name: credentials
  required: true
  type: 9
  section: Connect
- display: First fetch time
  name: from
  type: 0
  defaultvalue: 3 days
  required: true
  section: Collect
- display: Maximum number of events per fetch
  name: limit
  type: 0
  defaultvalue: 1000
  required: true
  section: Collect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  section: Connect
  advanced: true
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  section: Connect
  advanced: true
  required: false
description: This integration collects events from the Idaptive Next-Gen Access (INGA) using REST APIs.
display: CyberArk Identity Event Collector
name: CyberArk Identity Event Collector
script:
  commands:
  - description: 'Returns a list of events'
    name: cyberarkidentity-get-events
    arguments:
    - description: The maximum number of events per fetch. Default is 1000.
      defaultValue: 1000
      isArray: true
      name: limit
    - description: Set this argument to True to create events, otherwise events will only be displayed.
      auto: PREDEFINED
      defaultValue: 'False'
      name: should_push_events
      predefined:
      - 'True'
      - 'False'
      required: true
    - description: First fetch time (<number> <time unit>, for example 12 hours, 1 day, 3 months). Default is 3 days.
      isArray: true
      name: from
  runonce: false
  script: '-'
  isfetchevents: true
  type: python
  subtype: python3
  dockerimage: demisto/fastapi:1.0.0.68195
marketplaces:
- marketplacev2
fromversion: 6.8.0
tests:
- No tests (auto formatted)