Details

This atomic belongs to the Cisco Secure Endpoint atomic group.

Fetches events from Cisco Secure Endpoint based on various criteria.

Target: Secure Endpoint - v1 or an HTTP Endpoint for "api.amp.cisco.com" with a path of "/v1"

Account Key: None for Secure Endpoint - v1 or HTTP Basic Authentication for an HTTP Endpoint

Steps:
[] Format the start date
[] Build the query string parameters
[] Request events from Secure Endpoint
[] Check if the request was successful:
[]> If it was, set the output variable
[]> If it wasn't, output an error

More information about this API can be found in Secure Endpoint's API documentation: https://developer.cisco.com/docs/secure-endpoint/v1-api-reference-event/

About
Integration
Authorship
Cisco Managed