I am attempting to build an AA report from my OneDrive API connector, but I am finding it is working off alerts vs the API data. What I am trying to build is a report showing employees have used their OneDrive to share with external users the name of the file/folder, type, and size. I can get that data if it falls in the 90-day data window we have with AA, but I can't pull from the raw API over the life of the file/folder. I would just use the API Export, but it leaves off the shared with many times, so I was hoping AA would solve that.
Is that because AA is limited to only alerts within the subscription of data like 30/90 days?
Thank you
Best answer by jforrest
Hi Michael,
This data is available in the Netskope UI today at https://<tenant_name>.goskope.com/ns#/dashboard > Select the instance. For inclusion of this data in NAA we will need an enhancement to include the API Connector File/User Meta data. Secondly, insights from NAA are subject to retention periods as indicated so insights will be limited to the available and data ingestion into NAA.
There are multiple sources of data that store this context in Netskope;
Event Type
Use Case
Available in NAA?
Application Events
Include Audit events(Something happened like a share)
Available
Alert Events
Include the alerts for policy violations
Available
File/User Meta
User and File Meta data gathered on instance setup and maintained as users change and file meta changes
Pending NPlan-69, Please work with your CSM to have your use case included in the enhancement request
This data is available in the Netskope UI today at https://<tenant_name>.goskope.com/ns#/dashboard > Select the instance. For inclusion of this data in NAA we will need an enhancement to include the API Connector File/User Meta data. Secondly, insights from NAA are subject to retention periods as indicated so insights will be limited to the available and data ingestion into NAA.
There are multiple sources of data that store this context in Netskope;
Event Type
Use Case
Available in NAA?
Application Events
Include Audit events(Something happened like a share)
Available
Alert Events
Include the alerts for policy violations
Available
File/User Meta
User and File Meta data gathered on instance setup and maintained as users change and file meta changes
Pending NPlan-69, Please work with your CSM to have your use case included in the enhancement request
If you haven't already registered, now is a good time to do so. After you register, you can post to the community, receive email notifications, and lots more. It's quick and it's free! Create an account
We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.
