Imperva collector

Allow parallel downloading (multipod)

not allowed

Running environments

• collector server

• on-premise

Populated Devo events

table

Flattening preprocessing

no

Allowed source events obfuscation

yes

Waf logs

Download log files from the Imperva storage repository

https://logs1.incapsula.com/880_18226/

imperva_logs

waf.incapsula.siemintegration

Setting

Details

api_id

The API ID

api_key

The API key

api_url

The API URL

Authentication method

Token

Basic auth

Required

InitVariablesError

101

Cannot run both latest_issues and issues_by_date_range services - choose one or other

Can't have both

Pick one or the other

PullError

301

Error in the request itself - bad date perhaps? : {response.json()}

The date could be in the wrong format

Check the credentials.

PullError

302

access token has expired or invalid. status code: 401. Error message: {response.json()}

access token has expired or invalid

Check the credential.

PullError

303

The access token does not have valid permissions to perform this request. Add the required status code: 403. Error message: {response.json()}

The access token does not have valid permissions to perform this request

Check the credential.

PullError

304

The resource requested is not found. Resource Url: {request_url} status code: 404. Error message: {response.json()}

The resource requested is not found.

Read Stack trace and status code to determine

PullError

305

Unexpected error occurred at the Imperva server. status code: {response.status_code}. Error message: {response.json()}

Unexpected error occurred at the Imperva server.

Read Stack trace and status code to determine

SetupError

100

Unexpected error occurred at the Imperva server. status code: {response.status_code}. Error message: {response.json()}

Unexpected error occurred at the Imperva server.

Read Stack trace and status code to determine

Logging trace

Description

Number of available senders: 1

Displays the number of concurrent senders available for the given Sender Service.

Sender manager internal queue size: 0

Displays the items available in the internal sender queue.

This value helps detect bottlenecks and needs to increase the performance of data delivery to Devo. This last can be made by increasing the concurrent senders.

Total number of messages sent: 44, messages sent since "2022-06-28 10:39:22.511671+00:00": 21 (elapsed 0.007 seconds)

Displays the number of events from the last time the collector executed the pull logic. Following the given example, the following conclusions can be obtained:

• 44 events were sent to Devo since the collector started.

• The last checkpoint timestamp was 2022-06-28 10:39:22.511671+00:00.

• 21 events were sent to Devo between the last UTC checkpoint and now.

• Those 21 events required 0.007 seconds to be delivered.

  By default these traces will be shown every 10 minutes.

Logging trace

Description

Number of available senders: 1

Displays the number of concurrent senders available for the given Sender Service

Sender manager internal queue size: 0

Displays the items available in the internal sender queue.

Standard - Total number of messages sent: 57, messages sent since "2023-01-10 16:09:16.116750+00:00": 0 (elapsed 0.000 seconds

Displays the number of events from the last time the collector executed the pull logic. Following the given example, the following conclusions can be obtained:

• 44 events were sent to Devo since the collector started.

• The last checkpoint timestamp was 2023-01-10 16:09:16.116750+00:00.

• 21 events were sent to Devo between the last UTC checkpoint and now.

• Those 21 events required 0.00 seconds to be delivered.

v1.0.1

Oct 15, 2024

Bug fixing

Fixed override tag issue.

Recommended version

v1.0.0

Oct 4, 2024

NEW COLLECTOR

New collector

-