Kaspersky CyberTrace

IoCExport

27 February 2024

ID 199664

Defines settings for a single report with exported data.

Path

IoCExports > IoCExport

Attributes

This element has the following attributes.

IoCExport element attributes

Attribute

Description

name

The name of the export task.

The name can be in a range from 2 to 64 characters in length, must contain only Latin letters, digits (0-9), hyphens ('-'), and underscores ('_').

This attribute is mandatory.

enabled

Specifies if a report must be generated.

If the report must be generated, the value is true.

If the report must not be generated, the value is false.

This attribute is mandatory.

delimiter

Specifies the rule for splitting fields in the report file.

Use one of the following characters as a delimiter: ',', ';', ' ' (space character), '\t' (tab character).

This attribute is mandatory.

update_frequency

Specifies the update period (in minutes) for the export task.

The following values are possible: 0, 30, 60, 120, 240, 480, 960, 1440.

This attribute is mandatory.

create_header

Indicates whether the report file must contain column names as the first string.

If the report file must contain column names as the first string, the value is true.

If the report file must not contain column names as the first string, the value is false.

This attribute is mandatory.

records_limit

Specifies the maximum number of indicators that can be included to the report file.

The value must be a positive integer. The maximum number of records is 50 000.

This attribute is mandatory.

created_by

Specifies the identifier of the Kaspersky CyberTrace user who created the report.

This attribute is mandatory.

credentials

Specifies the credentials (user name and password) that must be used in the Basic authorization scheme when requesting a report. These credentials are stored encrypted. You can configure encryption by using the Kaspersky CyberTrace web user interface.

This attribute is optional.

Nested elements

The IoCExports > IoCExport element is a container for the following nested element:

  • Filter

    A configuration file must contain at least one Filter element.

Example

The following is an example of this element.

<IoCExport name="report_csv_123" enabled="true" delimiter=";" update_frequency="1440" create_header="true" records_limit="10000" created_by="admin" credentials="Mhy5QB7R487xbULBQJn8CzpOdV2fQftPyBJPxgjLBXZb+x08">

...

</IoCExport>

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.