From 0c3171d65318085354001ca95fcdbd28a7c5fb92 Mon Sep 17 00:00:00 2001 From: Charles LE REUN <77982369+CharlesLR-sekoia@users.noreply.github.com> Date: Wed, 18 Sep 2024 14:48:36 +0200 Subject: [PATCH 1/4] Update netskope_transaction.md --- .../categories/network_security/netskope_transaction.md | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/docs/integration/categories/network_security/netskope_transaction.md b/docs/integration/categories/network_security/netskope_transaction.md index c248e70e10..3accb784d9 100644 --- a/docs/integration/categories/network_security/netskope_transaction.md +++ b/docs/integration/categories/network_security/netskope_transaction.md @@ -52,6 +52,13 @@ Find more information about the subscription key on the [official google documen } ``` +5. Go to the `Event Streaming` section, and extract two sub-strings of the `Subscription Endpoint` that matchs the following patterns: + +| Information to collect | Example of values contained in the Subscription Endpoint | +| --- | --- | +| Subscription ID | prod-goskope-euXXX-sub-streaming-XXXXX-XXXXXXXXXX | +| Cloud Region | europe-west3 | + ### Instruction on Sekoia !!! Note @@ -89,4 +96,4 @@ Go to the Sekoia.io [playbook page](https://app.sekoia.io/operations/playbooks), - [Configuring Netskope Transaction Events](https://docs.netskope.com/en/netskope-help/data-security/transaction-events/netskope-transaction-events/) - [Create a service account](https://support.google.com/a/answer/7378726?hl=en) -- [Create and delete service account keys](https://cloud.google.com/iam/docs/keys-create-delete) \ No newline at end of file +- [Create and delete service account keys](https://cloud.google.com/iam/docs/keys-create-delete) From 34dd15dae29168849d498e883477d2575bef7947 Mon Sep 17 00:00:00 2001 From: Charles LE REUN <77982369+CharlesLR-sekoia@users.noreply.github.com> Date: Wed, 18 Sep 2024 15:10:52 +0200 Subject: [PATCH 2/4] Update netskope_transaction.md --- .../categories/network_security/netskope_transaction.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/integration/categories/network_security/netskope_transaction.md b/docs/integration/categories/network_security/netskope_transaction.md index 3accb784d9..54c12dea21 100644 --- a/docs/integration/categories/network_security/netskope_transaction.md +++ b/docs/integration/categories/network_security/netskope_transaction.md @@ -78,9 +78,13 @@ Go to the Sekoia.io [playbook page](https://app.sekoia.io/operations/playbooks), - Create a **Trigger configuration** using: * Your service account credentials from your Google Cloud environment extracted on a JSON file + * Subscription ID and Cloud Region extracted from the Subscription Endpoint on Netskope Event Streaming section * Type the `Intake key` created on the previous * Select the `application name` what you to fetch events from * Type the `Admin email` + +!!! Note + Please copy past the whole private key value during the procedure, including the begining and ending separators. - Click on the **Save** button - **Activate the playbook** with the toggle button on the top right corner of the page From c7df6ce157a6c57942b5a2014812ed050659de63 Mon Sep 17 00:00:00 2001 From: Charles LE REUN <77982369+CharlesLR-sekoia@users.noreply.github.com> Date: Thu, 19 Sep 2024 15:30:25 +0200 Subject: [PATCH 3/4] Update netskope_transaction.md --- .../categories/network_security/netskope_transaction.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/docs/integration/categories/network_security/netskope_transaction.md b/docs/integration/categories/network_security/netskope_transaction.md index 54c12dea21..3e55cd7aed 100644 --- a/docs/integration/categories/network_security/netskope_transaction.md +++ b/docs/integration/categories/network_security/netskope_transaction.md @@ -52,12 +52,13 @@ Find more information about the subscription key on the [official google documen } ``` -5. Go to the `Event Streaming` section, and extract two sub-strings of the `Subscription Endpoint` that matchs the following patterns: +5. Also in the `Event Streaming` section, extract two sub-strings of the `Subscription Endpoint` that matchs the following patterns: | Information to collect | Example of values contained in the Subscription Endpoint | | --- | --- | | Subscription ID | prod-goskope-euXXX-sub-streaming-XXXXX-XXXXXXXXXX | | Cloud Region | europe-west3 | +| Zone ID | a | ### Instruction on Sekoia @@ -78,7 +79,7 @@ Go to the Sekoia.io [playbook page](https://app.sekoia.io/operations/playbooks), - Create a **Trigger configuration** using: * Your service account credentials from your Google Cloud environment extracted on a JSON file - * Subscription ID and Cloud Region extracted from the Subscription Endpoint on Netskope Event Streaming section + * Subscription ID, Cloud Region and Zone ID extracted from the Subscription Endpoint on Netskope Event Streaming section * Type the `Intake key` created on the previous * Select the `application name` what you to fetch events from * Type the `Admin email` From 72b99ae279b9c84eeda63f9e7834afcac2e42b35 Mon Sep 17 00:00:00 2001 From: Charles LE REUN <77982369+CharlesLR-sekoia@users.noreply.github.com> Date: Thu, 19 Sep 2024 20:15:17 +0200 Subject: [PATCH 4/4] Update netskope_transaction.md --- .../categories/network_security/netskope_transaction.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/docs/integration/categories/network_security/netskope_transaction.md b/docs/integration/categories/network_security/netskope_transaction.md index 3e55cd7aed..73a7af7e38 100644 --- a/docs/integration/categories/network_security/netskope_transaction.md +++ b/docs/integration/categories/network_security/netskope_transaction.md @@ -52,11 +52,14 @@ Find more information about the subscription key on the [official google documen } ``` -5. Also in the `Event Streaming` section, extract two sub-strings of the `Subscription Endpoint` that matchs the following patterns: +5. Also in the `Event Streaming` section, extract 4 sub-strings from the `Subscription Endpoint` as explained in the following example: + +Example of Subcription Endoint: `projects/1023456728636/locations/europe-west3-a/subscriptions/prod-goskope-eu456-sub-streaming-12345-6706281495` | Information to collect | Example of values contained in the Subscription Endpoint | | --- | --- | -| Subscription ID | prod-goskope-euXXX-sub-streaming-XXXXX-XXXXXXXXXX | +| Project ID | 1023456728636 | +| Subscription ID | prod-goskope-eu456-sub-streaming-12345-6706281495 | | Cloud Region | europe-west3 | | Zone ID | a |