Azure / Azure/Azure-Sentinel

Cisco Meraki Events via REST API connector no longer populates DvcAction

Open
#14,993 1 comment 0 reactions 3 assignees Claimed by @v-kasghosh View on GitHub
Codeless Connector Framework (CCF) Connector Connector
Dominant language
Python
Stars
6.1k
Forks
3.8k
Avg merge
4d 7h
Merged PRs (30d)
125

Description

Hi @dhanunjaya1054

Cisco Meraki Events via REST API connector no longer populates DvcAction in ASimNetworkSessionLogs. Raw Meraki API payload still contains blocked=true when I run the python script to get SecurityEvents. Previous connector 1.0.0 mapped blocked events to DvcAction=Deny/Allow

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.