Skip to main content

Alibaba Action Trail Event Collector

This Integration is part of the Alibaba Action Trail Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.8.0 and later.

Alibaba logs event collector integration for XSIAM. This integration was integrated and tested with API version 0.6 of Alicloud Log Service.

Configure Alibaba Action Trail Event Collector on Cortex XSOAR#

  1. Navigate to Settings > Integrations > Servers & Services.

  2. Search for Alibaba Action Trail Event Collector.

  3. Click Add instance to create and configure a new integration instance.

    ParameterRequired
    EndpointTrue
    Access key idTrue
    Access keyTrue
    Project nameTrue
    Logstore nameTrue
    QueryTrue
    Number of incidents to fetch per fetch.False
    First fetch time intervalFalse
    The product corresponding to the integration that originated the events.True
    Use system proxy settingsFalse
    Use Secured ConnectionFalse
  4. Click Test to validate the URLs, token, and connection.

Commands#

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

alibaba-get-events#


Manual command to fetch events and display them.

Base Command#

alibaba-get-events

Input#

Argument NameDescriptionRequired
fromThe date after which to search for logs in seconds Example: 1652617222.Optional
limitNumber of events to fetch. Default is 1.Required
should_push_eventsSet this argument to True in order to create events, otherwise the command will only display them. Possible values are: True, False. Default is False.Required

Context Output#

There is no context output for this command.