Proofpoint integration settings
The Proofpoint integration settings enable you to modify the system properties for your environment.
| Property name | Description |
|---|---|
| TimeOut for the restAPI calls. sn_sec_proofpoint.http_timeout |
The timeout (in seconds) for fetching data from the api calls. Type: Integer Default value: 3000 |
| Logging level - debug, info, warn, error sn_sec_proofpoint.logging_verbosity |
The log verbosity level of the application that indicates the name of the type of information. The available values are:
Default value: info |
| Enforce a limit on number of Proofpoint Events that can be aggregated to a single incident. sn_sec_proofpoint.max_aggregations_per_si |
The maximum number of Proofpoint events that can be aggregated to one incident. Type: Integer Default value: 100 |
| Enforce a limit on number of security incidents that can be created in 24 hour period. sn_sec_proofpoint.max_si_per_day |
The maximum number of incidents that can be created in 24 hours. Type: Integer Default value: 1000 |
| No of days, we need to use in api call for top clickers, vap. sn_sec_proofpoint.default_days |
The number of days of data to fetch for top clickers and VAP. The available values are:
Type: Integer Default value: 90 |
| Boolean flag, if enabled it makes api call and populates Topclickers details. sn_sec_proofpoint.call_topclickers_api |
Option to enable and fetch top clicker data. Type: Boolean Default value: True |
| Boolean flag, if enabled it makes api call and populates VAP details. sn_sec_proofpoint.call_vap_api |
Option to enable and fetch VAP data. Type: Boolean Default value: False |
| It is to restrict the maximum number of users to display for topClickers, VAP Users. sn_sec_proofpoint.maxresults |
The maximum number of users to display for top clickers and VAP users. Type: Integer Default value: 100 |
| Enables/Disables using overlapping period during scheduled polling of Proofpoint Events. sn_sec_proofpoint.allow_overlap |
Option to enable overlapping period when scheduled polling is configured. Type: Boolean Default value: False |
| Overlap time in minutes to be used during scheduled polling of ProofpointEvents when overlap is enabled. sn_sec_proofpoint.overlap_time |
The overlap time in minutes when scheduled polling is configured. Type: Integer Default value: 5 |