Cisco Umbrella - Reporting v2 - Get Activity
This atomic belongs to the Cisco Umbrella atomic group.
Gets a list of activity entries from within the given timeframe. If no activity type is provided, all event types will be included. See the "Activity Type" input variable for more information about supported filters. The "Additional Parameters" input variable can be used to provide additional query string parameters which will be passed through to Umbrella. This atomic requires read permission to the "Reports / Aggregations" API scope.
Target: HTTP Endpoint for "reports.api.umbrella.com"
Account Key: None (uses an access token)
Steps:
[] Check if an activity type was provided. If so, prepend a forward slash so it can be inserted into the request URL
[] Make the API request for the report entries
[] Check if the API request succeeded:
[]> If it did, set the output variable
[]> If it didn't, output an error
More information about this API: https://developer.cisco.com/docs/cloud-security/activity-all/