About ericl42

ericl42 · 03-19-2018

Hello, Previously I was using the AMP API and just pulling down all events on a 10 minute interval but it's not a very pretty process since you have to set bookmarks whenever you pull down the data. Therefore I'd like to move to the event stream pr...

ericl42 · 02-08-2018

Hello, I just upgraded my FMCs to v.6.2.2.1 and I'm trying to work making our block IP automation a little cleaner. My initial plan was to put them in a security intel feed and have it update on a 5 min interval but unfortunately custom feeds can o...

ericl42 · 03-19-2018

Thank you very much. That is exactly what I needed. I made a slight modification to send it only to syslog and from there I'll have syslog-ng pick it up. my_logger = logging.getLogger('MyLogger') my_logger.setLevel(logging.INFO) handler = logging...

ericl42 · 03-19-2018

neipatel, Thanks for the link. One quick question regarding the parameters.json file. Is there a way for me to use the same original API call I created for this? Basically I want all groups and all event IDs and I was able to do that with the strin...

ericl42 · 02-12-2018

I would use the security intel feeds but custom feeds will only update on a 30 min basis and that's too long in these attack scenarios.

Member Since	‎10-25-2017 08:13 AM
Date Last Visited	‎04-06-2020 11:40 AM
Posts	5
Total Helpful Votes Received	5

User Statistics

User Activity

Event Streams

FMC Put API

Re: Event Streams

Re: Event Streams

Re: FMC Put API