Guardicore-EnrichmentRunner

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


Recurrence-triggered Logic App that drains the GuardicoreConnectionSlots Azure Table work queue, fetches Guardicore /api/v3.0/connections for each due slot's 5-minute window, and ingests the results into GuardicoreEnrichingConnections_CL via the Logs Ingestion API. Companion to the Guardicore-ProcessIncidentEnrichment playbook. No Azure Function App is deployed.

Attribute Value
Type Playbook
Solution Akamai Guardicore
Source View on GitHub

Logic App Connectors

This playbook uses 2 Logic App connectors / built-in actions:

Connector / Action Type Connections Actions
azuretables Managed 1 0
http Built-in 0 8
Action parameters (URLs, paths, function IDs)

http (Built-in)

Action Method Endpoint Other
Authenticate_to_Guardicore POST @{concat(parameters('GuardicoreUrl'), '/api/v3.0/authenticate')}
Claim_pending_slot GET @{concat(parameters('TablesEndpoint'), '/GuardicoreConnectionSlots()')}
Atomic_claim PUT @{concat(parameters('TablesEndpoint'), '/GuardicoreConnectionSlots(PartitionKey=''', outputs('Capture_claimed_row')['PartitionKey'], ''',RowKey=''', outputs('Capture_claimed_row')['RowKey'], ''')')}
Fetch_page GET @{concat(parameters('GuardicoreUrl'), '/api/v3.0/connections')}
Post_chunk POST @{concat(parameters('DataCollectionEndpoint'), '/dataCollectionRules/', parameters('DataCollectionRuleImmutableId'), '/streams/Custom-GuardicoreEnrichingConnections_CL?api-version=2023-01-01')}
Mark_completed PUT @{concat(parameters('TablesEndpoint'), '/GuardicoreConnectionSlots(PartitionKey=''', outputs('Capture_claimed_row')['PartitionKey'], ''',RowKey=''', outputs('Capture_claimed_row')['RowKey'], ''')')}
Mark_failed_or_retry_on_pagination_error PUT @{concat(parameters('TablesEndpoint'), '/GuardicoreConnectionSlots(PartitionKey=''', outputs('Capture_claimed_row')['PartitionKey'], ''',RowKey=''', outputs('Capture_claimed_row')['RowKey'], ''')')}
Mark_failed_or_retry_on_post_error PUT @{concat(parameters('TablesEndpoint'), '/GuardicoreConnectionSlots(PartitionKey=''', outputs('Capture_claimed_row')['PartitionKey'], ''',RowKey=''', outputs('Capture_claimed_row')['RowKey'], ''')')}

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Playbooks · Back to Akamai Guardicore