Skip to main content

Cyware Orchestrate

Akamai Cloud Security SIEM

App Vendor: Akamai Cloud Security SIEM

Connector Category: Analytics & SIEM

Connector Version: 1.0.0

API Version: 1.0.0

About App

Akamai Cloud Security SIEM helps manage and analyze security events and get insights by creating reports to fine-tune the security of the infrastructure tool. Akamai inspects security events that can be sent directly in real-time to Orchestrate. It also allows Security Engineers to review the data for reading, visualizing, and inspecting.

The Akamai Cloud Security SIEM app is configured with the Orchestrate application to perform the following actions:

Action Name

Description

Fetch security events

This action returns security events generated on the Akamai platform to aggregate them in your environment.

Configuration Parameters

The following configuration parameters are required for the Akamai Cloud Security SIEM app to communicate with the Akamai Cloud Security SIEM enterprise application. The parameters can be configured by creating instances in the app.

Parameter

Description

Field Type

Required/Optional

Comments

Base url

Enter the base URL.

Example :

https://akamai.asdf.com

Text

Required

Edgegrid client token

Enter the edgegrid client token.

Text

Required

Edgegrid client secret

Enter the edgegrid client secret.

Password

Required

Edgegrid access token

Enter the edgegrid access token.

Password

Required

SSL Verification

Enter the verification status.

Boolean

Optional

Allowed values:

  • True

  • False

Default value: False

Action: Fetch Security Events

This action returns security events generated on the Akamai platform to aggregate them in your environment.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Config ID

Enter the configuration ID.

Example:

29182;82912

Text

Required

Offset param

Enter the offset parameter.

Example:

c0bc409010aa6928e57cd5a3000433b9

Text

Required

Offset param is a hash token that denotes the last message. if specified, this operation fetches only security events that occurred from the offset.

Limit

Enter the limit.

Text

Required

Defines the maximum number of security events each fetch returns, in both offset and time-based modes.

Default limit:

10000

From param

Enter the start of a specified time range.

Example:

1488816442

Text

Required

The time range is expressed in UNIX epoch seconds.

To param

Enter the end of a specified time range.

Example:

1488816442

Text

Required

The time range is expressed in UNIX epoch seconds.

Example Request

[
  {
    "config_id": "<Sample Config ID>",
    "offset_param": "<Sample offset>",
    "limit_param": 100,
    "from_param": "1488816442",
    "to_param": "1488816442"
  }
]