Supported Cortex XSOAR versions: 8.2.0 and later.
This is a beta Integration, which lets you implement and test pre-release software. Since the integration is beta, it might contain bugs. Updates to the integration during the beta phase might include non-backward compatible features. We appreciate your feedback on the quality and usability of the integration to help us identify issues, fix them, and continually improve.
Use this integration to fetch security incidents from Forcepoint DLP as Cortex XSIAM events.
Navigate to Settings > Configurations > Data Collection > Automations & Feed Integrations.
Search for Forcepoint DLP Event Collector.
Click Add instance to create and configure a new integration instance.
Parameter Required Server URL True API Key True Maximum number of events per fetch False First fetch False Trust any certificate (not secure) False Use system proxy settings False
Click Test to validate the URLs, token, and connection.
You can execute these commands from the Cortex XSIAM CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.
Gets events from Forcepoint DLP.
|The number of events to return.
|Set this argument to True in order to create events, otherwise the command will only display them. Possible values are: true, false.
There is no context output for this command.