{"type":"doc","content":[{"type":"paragraph","content":[{"text":"Example Parameters","type":"text"}]},{"type":"codeBlock","content":[{"text":"{\n \"global_overrides\": {\n \"debug\": false\n },\n \"inputs\": {\n \"office365\": {\n \"id\": \"\",\n \"tenant_id\": \"\",\n \"client_secret\": \"\"\n },\n \"override_api_domain\": \"\",\n \"override_auth_domain\": \"\",\n \"environment\": \"\",\n \"services\": {\n \"azure_active_directory\": {\n \"start_time_in_utc\": \"\",\n \"override_tag\": \"\",\n \"override_bloom_filter_size\": \"\",\n \"override_bloom_filter_buffer_size\": \"\"\n },\n \"general_audit\": {\n \"start_time_in_utc\": \"\",\n \"override_tag\": \"\",\n \"override_bloom_filter_size\": \"\",\n \"override_bloom_filter_buffer_size\": \"\"\n },\n \"exchange\": {\n \"start_time_in_utc\": \"\",\n \"override_tag\": \"\",\n \"override_bloom_filter_size\": \"\",\n \"override_bloom_filter_buffer_size\": \"\"\n },\n \"sharepoint\": {\n \"start_time_in_utc\": \"\",\n \"override_tag\": \"\",\n \"override_bloom_filter_size\": \"\",\n \"override_bloom_filter_buffer_size\": \"\"\n },\n \"dlp\": {\n \"start_time_in_utc\": \"\",\n \"override_tag\": \"\",\n \"override_bloom_filter_size\": \"\",\n \"override_bloom_filter_buffer_size\": \"\"\n }\n }\n }\n }\n}","type":"text"}]},{"type":"table","attrs":{"layout":"default","width":760.0,"localId":"64d18a20-69e2-4ac9-acd4-be9e90ece99f"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[103.0]},"content":[{"type":"paragraph","content":[{"text":"Parameter","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Data type","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Type","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Value Range / Format","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[252.0]},"content":[{"type":"paragraph","content":[{"text":"Details","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[103.0]},"content":[{"type":"paragraph","content":[{"text":"short_unique_id","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"str","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Five digits","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[252.0]},"content":[{"type":"paragraph","content":[{"text":"Use this parameter to give a unique ID to this input service.","type":"text"},{"type":"hardBreak"},{"text":"This parameter is used to build the persistence address; do not use the same value for multiple collectors. It could cause a collision.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[103.0]},"content":[{"type":"paragraph","content":[{"text":"tenant_id_value","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"str","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Minimum length: 1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[252.0]},"content":[{"type":"paragraph","content":[{"text":"This is the Tenant’s ID you created in Entra AD. You can obtain it from the Overview page in your registered application.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[103.0]},"content":[{"type":"paragraph","content":[{"text":"client_id_value","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"str","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Minimum length: 1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[252.0]},"content":[{"type":"paragraph","content":[{"text":"This is the Application (client) ID you created in Entra AD. You can obtain it from the Overview page in your registered application.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[103.0]},"content":[{"type":"paragraph","content":[{"text":"client_secret_value","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"str","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Mandatory","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Minimum length: 1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[252.0]},"content":[{"type":"paragraph","content":[{"text":"This is the client secret you created in Entra AD. You can obtain it from the Certificates & secrets page in your registered application.","type":"text"}]},{"type":"paragraph","content":[{"text":"The ","type":"text"},{"text":"value","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"contains a tilde ~ character.","type":"text","marks":[{"type":"underline"},{"type":"link","attrs":{"href":"https://devodocs.atlassian.net/wiki/spaces/latest/pages/1086816286"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[103.0]},"content":[{"type":"paragraph","content":[{"text":"environment_value","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"str","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Optional","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Minimum length: 1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[252.0]},"content":[{"type":"paragraph","content":[{"text":"This is an optional control parameter that is injected into the events and allows you to differentiate the environment. For example: dev and prod.","type":"text"}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"This parameter should be removed if it is not used.","type":"text"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[103.0]},"content":[{"type":"paragraph","content":[{"text":"start_time_in_utc_value","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"str","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Optional","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"UTC datetime string having datetime string format ","type":"text"},{"text":"%Y-%m-%dT%H-%M-%SZ","type":"text","marks":[{"type":"code"}]},{"text":" (e.g., “2020-01-01T00:00:01Z”)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[252.0]},"content":[{"type":"paragraph","content":[{"text":"This configuration allows you to set a custom date as the beginning of the period to download. This allows downloading historical data (one month back for example) before downloading new events.","type":"text"}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"This parameter should be removed if it is not used.","type":"text"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[103.0]},"content":[{"type":"paragraph","content":[{"text":"override_tag_value","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"str","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Optional","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Devo tag-friendly string (no special characters, spaces, etc.) For more information see ","type":"text"},{"text":"Devo Tags","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.devo.com/confluence/ndt/data-management/data-tables/about-devo-tags"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[252.0]},"content":[{"type":"paragraph","content":[{"text":"An optional tag that allows users to override the service default tags.","type":"text"}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"This parameter should be removed if it is not used.","type":"text"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[103.0]},"content":[{"type":"paragraph","content":[{"text":"override_api_domain_value","type":"text","marks":[{"type":"annotation","attrs":{"annotationType":"inlineComment","id":"216289df-9a26-479f-b0ba-629f246d3b91"}},{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"int","type":"text","marks":[{"type":"annotation","attrs":{"annotationType":"inlineComment","id":"216289df-9a26-479f-b0ba-629f246d3b91"}},{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Optional","type":"text","marks":[{"type":"annotation","attrs":{"annotationType":"inlineComment","id":"216289df-9a26-479f-b0ba-629f246d3b91"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"manage.office.com","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[252.0]},"content":[{"type":"paragraph","content":[{"text":"A parameter that allows you to ","type":"text","marks":[{"type":"annotation","attrs":{"annotationType":"inlineComment","id":"216289df-9a26-479f-b0ba-629f246d3b91"}}]},{"text":"override the API domain value","type":"text","marks":[{"type":"annotation","attrs":{"annotationType":"inlineComment","id":"216289df-9a26-479f-b0ba-629f246d3b91"}},{"type":"link","attrs":{"href":"https://learn.microsoft.com/en-us/graph/deployments"}}]},{"text":".","type":"text","marks":[{"type":"annotation","attrs":{"annotationType":"inlineComment","id":"216289df-9a26-479f-b0ba-629f246d3b91"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[103.0]},"content":[{"type":"paragraph","content":[{"text":"override_auth_domain_value","type":"text","marks":[{"type":"annotation","attrs":{"annotationType":"inlineComment","id":"216289df-9a26-479f-b0ba-629f246d3b91"}},{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"int","type":"text","marks":[{"type":"annotation","attrs":{"annotationType":"inlineComment","id":"216289df-9a26-479f-b0ba-629f246d3b91"}},{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Optional","type":"text","marks":[{"type":"annotation","attrs":{"annotationType":"inlineComment","id":"216289df-9a26-479f-b0ba-629f246d3b91"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"login.microsoftonline.com","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[252.0]},"content":[{"type":"paragraph","content":[{"text":"A parameter that allows you to override the authentication domain value.","type":"text","marks":[{"type":"annotation","attrs":{"annotationType":"inlineComment","id":"216289df-9a26-479f-b0ba-629f246d3b91"}}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[103.0]},"content":[{"type":"paragraph","content":[{"text":"override_bloom_filter_size_value","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"int","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Optional","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Default value: 10,000,000","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[252.0]},"content":[{"type":"paragraph","content":[{"text":"A parameter that changes the maximum number of entries the deduplication bloom filter can retain before resetting. Every 10 million records translates to roughly 10MB of required disk space.","type":"text"}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"This parameter should be configured only if absolutely necessary.","type":"text"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[103.0]},"content":[{"type":"paragraph","content":[{"text":"override_bloom_filter_buffer_size_value","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"int","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Optional","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[97.0]},"content":[{"type":"paragraph","content":[{"text":"Default value: 100,000","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[252.0]},"content":[{"type":"paragraph","content":[{"text":"A parameter that allows you to specify the bloom filter buffer size. The buffer is used to seed the bloom filter (upon reset) with the most recent ","type":"text"},{"text":"n","type":"text","marks":[{"type":"code"}]},{"text":" hash values.","type":"text"}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"This parameter should be configured only if absolutely necessary.","type":"text"}]}]}]}]}]}],"version":1}

Browser not supported