Netskope GetAlerts | Kestra

Netskope GetAlerts
Certified
Fetch alerts from Netskope Security Cloud

Polls alerts via the Netskope REST API v2 Data Export endpoint and stores the response as a file in Kestra storage.

yaml
type: io.kestra.plugin.netskope.events.GetAlerts

Examples

yaml
id: get_netskope_alerts
namespace: io.kestra.security
tasks:
  - id: fetch_alerts
    type: io.kestra.plugin.netskope.events.GetAlerts
    baseUrl: "https://{{ secret('NETSKOPE_TENANT') }}.goskope.com"
    apiToken: "{{ secret('NETSKOPE_V2_TOKEN') }}"
    alertType: malware
    query: "alert_severity eq 'critical'"

Properties

apiToken *string

The Netskope v2 API token

baseUrl *string

The base URL of the Netskope tenant

e.g. https://tenant.goskope.com

alertType string

The alert type to retrieve

e.g. malware, dlp, policy, compromised-credentials, etc.

pluginDefaultsRef string

Reference (ref) of the pluginDefaults to apply to this task.

query string

Optional NRSQL query filter

Added as the query query parameter

Outputs

alertCount integer

Default0

Number of alerts in the response data array

uri string

Formaturi

URI of the stored alert response JSON file

OPA (Open Policy Agent)

Tasks to manage Open Policy Agent policies and decisions, including upload, evaluation, and partial evaluation.

Infoblox

Infoblox DDI (DNS, DHCP, IPAM) tasks and triggers for Kestra, using the Infoblox WAPI REST API.