connector.conf

# Configuration for authentication 
[auth://<specify_name>]
frequency = -1
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

# Input to fetch Box folder metadata
[folder://<specify_name>]
host = <host-name>, Default is current system hostname
repo =  <repository-name>, No need to mention if mentioned in global.conf
sourcetype = dataelicit/box:box-folder
frequency = <seconds>  Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of 
        frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

# Input to fetch Box file metadata
[file://<specify_name>]
host = <host-name>, Default is current system hostname
repo =  <repository-name>, No need to mention if mentioned in global.conf
sourcetype = dataelicit/box:box-file
frequency = <seconds>  Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of 
        frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

# Input to fetch Box collaboration metadata
[collaboration://<specify_name>]
host = <host-name>, Default is current system hostname
repo =  <repository-name>, No need to mention if mentioned in global.conf
sourcetype = dataelicit/box:box-folder-collaboration
frequency = <seconds>  Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of 
        frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

# Input to fetch Box file comments
[file_comments://<specify_name>]
host = <host-name>, Default is current system hostname
repo =  <repository-name>, No need to mention if mentioned in global.conf
sourcetype = dataelicit/box:box-filecomment
frequency = <seconds>  Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of 
        frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

# Input to fetch Box file tasks
[file_tasks://<specify_name>]
host = <host-name>, Default is current system hostname
repo =  <repository-name>, No need to mention if mentioned in global.conf
sourcetype = dataelicit/box:box-filetask
frequency = <seconds>  Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of 
        frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

# Input to fetch Box groups information
[groups://<specify_name>]
host = <host-name>, Default is current system hostname
repo =  <repository-name>, No need to mention if mentioned in global.conf
sourcetype = dataelicit/box:box-groups
frequency = <seconds>  Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of 
        frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

# Input to fetch Box users information
[users://<specify_name>]
host = <host-name>, Default is current system hostname
repo =  <repository-name>, No need to mention if mentioned in global.conf
sourcetype = dataelicit/box:box-users
frequency = <seconds>  Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of 
        frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

#file ingestion input
#file extensions are supported for file ingestion input: .json, .xml, .csv, .txt, .text, and .log. Files with other extensions will not be ingested.
[filecontent://<specify_name>]
host = <host-name>, Default is current system hostname
repo =  <repository-name>, No need to mention if mentioned in global.conf
sourcetype = dataelicit/box:box-filecontent
frequency = <seconds>  Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of
        frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
folder_or_file_id = <file-or-folder-ID> Enter the File/Folder ID found at the end of the Box portal URL. 
		Example: https://app.box.com/folder/123456789 ➔ ID is 123456789
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

[filecontent_csv://<specify_name>]
host = <host-name>, Default is current system hostname
repo =  <repository-name>, No need to mention if mentioned in global.conf
sourcetype = dataelicit/box:box-filecontent_csv
frequency = <seconds>  Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of
        frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
folder_or_file_id = <file-or-folder-ID> Enter the File/Folder ID found at the end of the Box portal URL. 
		Example: https://app.box.com/folder/123456789 ➔ ID is 123456789
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

[filecontent_json://<specify_name>]
host = <host-name>, Default is current system hostname
repo =  <repository-name>, No need to mention if mentioned in global.conf
sourcetype = dataelicit/box:box-filecontent_json
frequency = <seconds>  Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of
        frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
folder_or_file_id = <file-or-folder-ID> Enter the File/Folder ID found at the end of the Box portal URL. 
		Example: https://app.box.com/folder/123456789 ➔ ID is 123456789
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1


[filecontent_xml://<specify_name>]
host = <host-name>, Default is current system hostname
repo =  <repository-name>, No need to mention if mentioned in global.conf
sourcetype = dataelicit/box:box-filecontent_xml
frequency = <seconds>  Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of
        frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
folder_or_file_id = <file-or-folder-ID> Enter the File/Folder ID found at the end of the Box portal URL. 
		Example: https://app.box.com/folder/123456789 ➔ ID is 123456789
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1


# Input to fetch Box Events (admin_logs or admin_logs_streaming APIs)
[events://<specify_name>]
host = <host-name>, Default is current system hostname
repo =  <repository-name>, No need to mention if mentioned in global.conf
sourcetype = dataelicit/box:box-events
frequency = <seconds>  Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of
        frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
delay = <seconds> Delay (sec) for scanning the events. It should be strictly less than 
				frequency.
collect_since_timestamp = <date and time> The date and time, after converting to UTC in "YYYY-MM-DDThh:mm:ss" format e.g. 2025-01-30T14:00:30, after 
				which to collect data ,The date should not be in the future and should not be more than one year in the past. The default
				is last 90 days.
live_monitoring = 0/1
     Set 0 for Live Monitoring Input (admin_logs_streaming API).
         - Collects events from the past 2 weeks and continues in near real-time.
         - Advantage: Lower latency, faster event availability.
     Set 1 for Historical Querying Input (admin_logs API).
         - Collects historical events from up to the past 90 days and continues based 
				    on schedule.
         - Advantage: Broader historical coverage.
     Choose based on your use case: 
         - For real-time/near real-time needs ➔ use live_monitoring = 0.
         - For broader historical analysis ➔ use live_monitoring = 1.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

[auth://auth]
frequency = -1
secret = box_creds
global = box

[folder://folder]
sourcetype = dataelicit/box:box-folder
frequency = 604800
secret = box_creds
global = box

[file://file]
sourcetype = dataelicit/box:box-file
frequency = 604800
secret = box_creds
global = box

[collaboration://collaboration]
sourcetype = dataelicit/box:box-folder-collaboration
frequency = 604800
secret = box_creds
global = box

[file_comments://file_comments]
sourcetype = dataelicit/box:box-filecomment
frequency = 604800
secret = box_creds
global = box

[file_tasks://file_tasks]
sourcetype = dataelicit/box:box-filetask
frequency = 604800
secret = box_creds
global = box

[groups://groups]
sourcetype = dataelicit/box:box-groups
frequency = 604800
secret = box_creds
global = box

[users://users]
sourcetype = dataelicit/box:box-users
frequency = 604800
secret = box_creds
global = box

[filecontent://filecontent]
sourcetype = dataelicit/box:box-filecontent
frequency = 300
folder_or_file_id = 123456789
secret = box_creds
global = box

[filecontent_csv://filecontent_csv]
sourcetype = dataelicit/box:box-filecontent_csv
frequency = 300
folder_or_file_id = 123456789
secret = box_creds
global = box

[filecontent_json://filecontent_json]
sourcetype = dataelicit/box:box-filecontent_json
frequency = 300
folder_or_file_id = 123456789
secret = box_creds
global = box

[filecontent_xml://filecontent_xml]
sourcetype = dataelicit/box:box-filecontent_xml
frequency = 300
folder_or_file_id = 123456789
secret = box_creds
global = box

[events://events]
sourcetype = dataelicit/box:box-events
frequency = 300
delay = 30
collect_since_timestamp = 2025-04-08T07:27:42
live_monitoring = 1
secret = box_creds
global = box