Specifications #
[okta-logs://<specify_name>]
host = <host-name>, Default is current system hostname
repo = <repository-name>
frequency = <seconds> Interval to run the input
cron = <cron-expression>
Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
It is preferable to define only one, either cron or frequency.
source = <source-name>
sourcetype = dataelicit/okta:okta-logs
domain = Organization Domainname Ex: yourdomain.okta.com
start_date = Start Date to start the data collection, in UTC timezone. Format: YYYY-MM-DDTHH:MM:SS.SSSZ
Default: 1 month back
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1
[okta-users://<specify_name>]
host = <host-name>, Default is current system hostname
repo = <repository-name>
frequency = <seconds> Interval to run the input
cron = <cron-expression>
Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
It is preferable to define only one, either cron or frequency.
source = <source-name>
sourcetype = dataelicit/okta:okta-users
domain = Organization Domainname Ex: yourdomain.okta.com
start_date = Start Date to start the data collection, in UTC timezone. Format: YYYY-MM-DDTHH:MM:SS.SSSZ
Default: 1 month back
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1
[okta-groups://<specify_name>]
host = <host-name>, Default is current system hostname
repo = <repository-name>
frequency = <seconds> Interval to run the input
cron = <cron-expression>
Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
It is preferable to define only one, either cron or frequency.
source = <source-name>
sourcetype = dataelicit/okta:okta-groups
domain = Organization Domainname Ex: yourdomain.okta.com
start_date = Start Date to start the data collection, in UTC timezone. Format: YYYY-MM-DDTHH:MM:SS.SSSZ
Default: 1 month back
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1
Example #
[okta-logs://auditlogs]
sourcetype = dataelicit/okta:okta-logs
frequency = 300
global = okta
secret = okta-creds
[okta-users://userdata]
sourcetype = dataelicit/okta:okta-users
cron = 0 0 1 * *
global = okta
secret = okta-creds
[okta-groups://groupsdata]
sourcetype = dataelicit/okta:okta-groups
cron = 0 0 1 * *
global = okta
secret = okta-creds
Note #
Make sure that the stanza name you define in local/connector.conf is not already disabled in default/connector.conf, else it will get skipped.