Proofpoint integration settings

  • Release version: Yokohama
  • Updated March 10, 2025
  • 1 minute to read
  • The Proofpoint integration settings enable you to modify the system properties for your environment.

    Table 1. Proofpoint integration settings form
    Property name Description
    TimeOut for the restAPI calls.

    sn_sec_proofpoint.http_timeout

    The timeout (in seconds) for fetching data from the api calls.

    Type: Integer

    Default value: 3000

    Logging level - debug, info, warn, error

    sn_sec_proofpoint.logging_verbosity

    The log verbosity level of the application that indicates the name of the type of information. The available values are:
    • error
    • warn
    • info
    • debug

    Default value: info

    Enforce a limit on number of Proofpoint Events that can be aggregated to a single incident.

    sn_sec_proofpoint.max_aggregations_per_si

    The maximum number of Proofpoint events that can be aggregated to one incident.

    Type: Integer

    Default value: 100

    Enforce a limit on number of security incidents that can be created in 24 hour period.

    sn_sec_proofpoint.max_si_per_day

    The maximum number of incidents that can be created in 24 hours.

    Type: Integer

    Default value: 1000

    No of days, we need to use in api call for top clickers, vap.

    sn_sec_proofpoint.default_days

    The number of days of data to fetch for top clickers and VAP. The available values are:
    • 14
    • 30
    • 90

    Type: Integer

    Default value: 90

    Boolean flag, if enabled it makes api call and populates Topclickers details.

    sn_sec_proofpoint.call_topclickers_api

    Option to enable and fetch top clicker data.

    Type: Boolean

    Default value: True

    Boolean flag, if enabled it makes api call and populates VAP details.

    sn_sec_proofpoint.call_vap_api

    Option to enable and fetch VAP data.

    Type: Boolean

    Default value: False

    It is to restrict the maximum number of users to display for topClickers, VAP Users.

    sn_sec_proofpoint.maxresults

    The maximum number of users to display for top clickers and VAP users.

    Type: Integer

    Default value: 100

    Enables/Disables using overlapping period during scheduled polling of Proofpoint Events.

    sn_sec_proofpoint.allow_overlap

    Option to enable overlapping period when scheduled polling is configured.

    Type: Boolean

    Default value: False

    Overlap time in minutes to be used during scheduled polling of ProofpointEvents when overlap is enabled.

    sn_sec_proofpoint.overlap_time

    The overlap time in minutes when scheduled polling is configured.

    Type: Integer

    Default value: 5