Supported Cortex XSOAR versions: 8.2.0 and later.
Okta Auth0 logs event collector integration for Cortex XSIAM. This integration was integrated and tested with version 2.0 of Okta Auth0. Please see the Okta Auth0 rate limit policy.
Navigate to Settings > Configurations > Data Collection > Automation & Feed Integrations.
Search for Okta Auth0 Event Collector.
Click Add instance to create and configure a new integration instance.
Parameter Description Required Server URL True Client ID The API key to use for connection. True Client Secret True First fetch (<number> <time unit>, e.g., 12 hours, 7 days) False The maximum number of events per fetch False Trust any certificate (not secure) False Use system proxy settings False
Click Test to validate the URL, client credentials, and connection.
You can execute these commands from the Cortex XSIAM CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.
Manual command to fetch events and display them.
|should_push_events||If true, the command will create events, otherwise it will only display them. Possible values are: true, false. Default is false.||Required|
|limit||Maximum number of results to return. Maximum is 2000. Default is 10.||Optional|
|since||Occurrence time of the least recent event to include (inclusive). Default is 3 days.||Optional|
There is no context output for this command.