Specifications #
[account://<stanza-name>]
sourcetype = dataelicit/duo:duo-account-log
host = <host-name>, Default is current system hostname
source = <source-name>, Default is stanza-name
repo = <repository-name>
frequency = <seconds>
cron = <cron-expression>
Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1
[activity://<stanza-name>]
sourcetype = dataelicit/duo:duo-activity-log
host = <host-name>, Default is current system hostname
source = <source-name>, Default is stanza-name
repo = <repository-name>
frequency = <seconds>
cron = <cron-expression>
Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1
[admin-actions://<stanza-name>]
sourcetype = dataelicit/duo:duo-administrator-log
host = <host-name>, Default is current system hostname
source = <source-name>, Default is stanza-name
repo = <repository-name>
frequency = <seconds>
cron = <cron-expression>
Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1
[authentication://<stanza-name>]
sourcetype = dataelicit/duo:duo-authentication-log
host = <host-name>, Default is current system hostname
source = <source-name>, Default is stanza-name
repo = <repository-name>
frequency = <seconds>
cron = <cron-expression>
Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1
[endpoints://<stanza-name>]
sourcetype = dataelicit/duo:duo-endpoints-log
host = <host-name>, Default is current system hostname
source = <source-name>, Default is stanza-name
repo = <repository-name>
frequency = <seconds>
cron = <cron-expression>
Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1
[telephony://<stanza-name>]
sourcetype = dataelicit/duo:duo-telephony-log
host = <host-name>, Default is current system hostname
source = <source-name>, Default is stanza-name
repo = <repository-name>
frequency = <seconds>
cron = <cron-expression>
Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1
[trustmonitor://<stanza-name>]
sourcetype = dataelicit/duo:duo-trustmonitor-log
host = <host-name>, Default is current system hostname
source = <source-name>, Default is stanza-name
repo = <repository-name>
frequency = <seconds>
cron = <cron-expression>
Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1
Example #
[account://duo-account-info]
sourcetype = dataelicit/duo:duo-account-log
cron = 0 0 1 * *
secret = duo_creds
global = duo
[activity://duo-activity]
sourcetype = dataelicit/duo:duo-activity-log
frequency = 300
secret = duo_creds
global = duo
[admin-actions://duo-admin-actions]
sourcetype = dataelicit/duo:duo-administrator-log
frequency = 300
secret = duo_creds
global = duo
[authentication://duo-authentication]
sourcetype = dataelicit/duo:duo-authentication-log
frequency = 300
secret = duo_creds
global = duo
[endpoints://duo-endpoints-info]
sourcetype = dataelicit/duo:duo-endpoints-log
cron = 0 0 1 * *
secret = duo_creds
global = duo
[telephony://duo-telephony]
sourcetype = dataelicit/duo:duo-telephony-log
cron = 0 0 1 * *
secret = duo_creds
global = duo
[trustmonitor://trustmonitor]
sourcetype = dataelicit/duo:duo-trustmonitor-log
frequency = 300
secret = duo_creds
global = duo
Note #
Make sure that the stanza name you define in local/connector.conf is not already disabled in default/connector.conf, else it will get skipped.