Netskope GetAlerts

Netskope GetAlerts

Certified

Fetch alerts from Netskope Security Cloud

Polls alerts via the Netskope REST API v2 Data Export endpoint and stores the response as a file in Kestra storage.

yaml
type: io.kestra.plugin.netskope.events.GetAlerts
yaml
id: get_netskope_alerts
namespace: io.kestra.security
tasks:
  - id: fetch_alerts
    type: io.kestra.plugin.netskope.events.GetAlerts
    baseUrl: "https://{{ secret('NETSKOPE_TENANT') }}.goskope.com"
    apiToken: "{{ secret('NETSKOPE_V2_TOKEN') }}"
    alertType: malware
    query: "alert_severity eq 'critical'"
Properties

The Netskope v2 API token

The base URL of the Netskope tenant

The alert type to retrieve

e.g. malware, dlp, policy, compromised-credentials, etc.

Assets this task consumes as inputs or produces as outputs, for lineage tracking and the asset graph (Enterprise Edition). A flow declaring this property on a task is rejected in the open-source edition.

Definitions
assetFailureBehaviorstring
Possible Values
IGNOREFAILWARN

Asset failure behavior

Behavior applied to the task state when a declared asset fails to render, emit, or be persisted (e.g. a lock conflict): FAIL escalates it to FAILED, WARN (default) warns it if it would otherwise succeed, IGNORE leaves the state untouched.

enableAutobooleanstring

Whether to auto-register assets referenced dynamically at runtime that are not statically declared in inputs or outputs.

inputsarray

The assets consumed as inputs.

id*string
Min length1
typestring
outputs

The assets produced as outputs.

id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*object
descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150
id*string
Min length1
Max length150
type*string
Min length1

Custom asset type

descriptionstring
displayNamestring
metadataobject
Default{}
namespacestring
Min length1
Max length150

Optional NRSQL query filter

Added as the query query parameter

Default0

Number of alerts in the response data array

Formaturi

URI of the stored alert response JSON file