Forcepoint DLP Event Collector (Beta)
This Integration is part of the Forcepoint DLP Pack.#
Supported versions
Supported Cortex XSOAR versions: 8.2.0 and later.
beta
This is a beta Integration, which lets you implement and test pre-release software. Since the integration is beta, it might contain bugs. Updates to the integration during the beta phase might include non-backward compatible features. We appreciate your feedback on the quality and usability of the integration to help us identify issues, fix them, and continually improve.
Use this integration to fetch security incidents from Forcepoint DLP as Cortex XSIAM events.
Configure Forcepoint DLP Event Collector in Cortex#
| Parameter | Required |
|---|---|
| Server URL | True |
| API Key | True |
| Maximum number of events per fetch | False |
| First fetch | False |
| Trust any certificate (not secure) | False |
| Use system proxy settings | False |
Commands#
You can execute these commands from the CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.
forcepoint-dlp-get-events#
Gets events from Forcepoint DLP.
Base Command#
forcepoint-dlp-get-events
Input#
| Argument Name | Description | Default | Required |
|---|---|---|---|
| limit | The number of events to return. | 10 | Optional |
| should_push_events | Set this argument to True in order to create events, otherwise the command will only display them. Possible values are: true, false. | false | Required |
Context Output#
There is no context output for this command.