IBM Secrets Manager: add event collector (CIAC-17197) - #45935
RosenbergYehuda wants to merge 3 commits into
Conversation
Add a new IBM Secrets Manager pack with an XSIAM event collector that collects Secrets Manager audit / Activity Tracker events via the IBM Cloud Logs query API (POST /v1/query, SSE), authenticating with IBM Cloud IAM (API key -> short-lived Bearer). Includes test-module, ibm-secrets-manager-get-events, fetch-events with half-open window de-dup, and unit tests.
🤖 AI-Powered Code Review AvailableYou can leverage AI-powered code review to assist with this PR! Available Commands:
|
Coverage Report
|
||||||||||||||||||||||||||||||
This comment has been minimized.
This comment has been minimized.
- Rename integration id/name/display and folder/files from IBMSecretsManagerEventCollector to IBMSecretsManager to match the design (display name 'IBM Secrets Manager'); update defaultDataSource, test imports, and docs. - Replace 'Cortex XSIAM' with 'Cortex' in all user-facing text since the collected events serve multiple Cortex products.
|
|
|
Validate summary Verdict: PR can be force merged from validate perspective? ❌ |
🔍 AI Triage Report AvailableAn automated triage report has been generated for this pipeline. Status: 📋 Triage Report
|
Contributing to Cortex XSOAR Content
Make sure to register your contribution by filling the contribution registration form
The Pull Request will be reviewed only after the contribution registration form is filled.
Status
Related Issues
Description
Must have