Mimecast#
Integration Details |
|
Ingester |
Mimecast Configuration#
To configure the ingester you will need the following from Mimecast:
Client ID: The OAuth 2.0 client ID for your API 2.0 integration
Client Secret: The OAuth 2.0 client secret for your API 2.0 integration
See the Mimecast documentation for instructions on creating an API 2.0 integration and obtaining these credentials.
Gravwell Configuration#
Gravwell Storage Well Configuration#
Set up the well configuration in your Gravwell indexers.
Sample well config:
Create or edit: /opt/gravwell/etc/gravwell.conf.d/mimecast-well.conf
[Storage-Well "mimecast"]
Location=/opt/gravwell/storage/mimecast
Tags=mimecast*
Gravwell Ingester Configuration: Mimecast#
If the Hosted Runner is not installed, follow the configuration guide for Mimecast to create your own configuration.
Edit: /opt/gravwell/etc/hosted_runner.conf
[Mimecast "mimecast"]
Ingester-UUID="9a000000-0000-0000-0000-000000000000"
Client-Id="your-client-id"
Client-Secret="your-client-secret"
Api=mta-delivery
Api=mta-receipt
Api=mta-av
Api=mta-spam
Api=audit
Tag-Prefix="mimecast"
Note
Remember to restart the service to apply the new config:
sudo systemctl restart gravwell_hosted_runner.service