GitHubAuditLogs_PollerConfig.json

[
    {
        "name": "GitHubAuditLogsRequest",
        "apiVersion": "2022-12-01-preview",
        "type": "Microsoft.SecurityInsights/dataConnectors",
        "location": "{{location}}",
        "kind": "RestApiPoller",
        "properties": {
            "connectorDefinitionName":"GitHubAuditDefinitionV2",
            "dcrConfig": {
                "dataCollectionEndpoint": "{{dataCollectionEndpoint}}",
                "dataCollectionRuleImmutableId": "{{dataCollectionRuleImmutableId}}",
                "streamName": "Custom-GitHubAuditLogs"
            },
            "dataType": "GitHubAuditLogsV2_CL",
            "addOnAttributes": {
                "ApiUrl": "[[replace(parameters('ApiUrl'), 'https://github.com/', 'https://api.github.com/')]"
            },
            "response": {
                "eventsJsonPaths": [
                    "$"
                ],
                "format": "json"
            },
            "paging": {
                "pagingType": "LinkHeader",
                "pageSizeParaName": "per_page"
            },
            "auth": {
                "apiKeyName": "Authorization",
                "ApiKey": "{{apikey}}",
                "apiKeyIdentifier": "token",
                "type": "APIKey"
            },
            "request": {
                "apiEndpoint": "[[concat(replace(parameters('ApiUrl'), 'https://github.com/', 'https://api.github.com/'),'/audit-log?include=all')]",
                "rateLimitQPS": 50,
                "queryWindowInMin": 15,
                "httpMethod": "GET",
                "queryTimeFormat": "yyyy-MM-ddTHH:mm:ssZ",
                "retryCount": 2,
                "timeoutInSeconds": 60,
                "headers": {
                    "Accept": "application/json",
                    "User-Agent": "Scuba"
                },
                "queryParameters": {
                    "phrase": "created:{_QueryWindowStartTime}..{_QueryWindowEndTime}"
                }
            },
            "isActive": true
        }
    }
]