List Device Events - Chronicle

This playbook receives ChronicleAsset identifier information and provides a list of events related to each one of them. Supported integration: Chronicle

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

This playbook does not use any sub-playbooks.

Integrations

Chronicle

Scripts

DeleteContext

Commands

gcb-list-events

Playbook Inputs


NameDescriptionDefault ValueRequired
chronicleasset_hostnameThe hostname associated with the ChronicleAsset.Optional
chronicleasset_ipThe IP address associated with the ChronicleAsset.Optional
chronicleasset_macThe MAC address associated with the ChronicleAsset.Optional
chronicleasset_product_idThe product ID associated with the ChronicleAsset.Optional

Playbook Outputs


PathDescriptionType
GoogleChronicleBackstory.EventsList of events associated with the ChronicleAsset.unknown

Playbook Image


List Device Events - Chronicle