Provides the WazuhAgentMsGraphConfiguration which allows to parse the ms-graph section of the Wazuh local configuration (ossec.conf).

class WazuhAgentMsGraphConfiguration(**kwargs)

Bases: object

Object representation of an agent’s ms-graph configuration section.

Wazuh reference: https://documentation.wazuh.com/current/user-manual/reference/ossec-conf/ms-graph-module.html

api_auth: WazuhAgentMsGraphApiAuthConfiguration | None

API authentication credentials configuration.

curl_max_size: int | None

The maximum accepted response size in bytes.

enabled: bool = True

Enables the Microsoft Graph module.

interval: int | None

The length of time the module will wait before searching for logs.

only_future_events: bool = True

Indicates wether only future events are being collected or not.

page_size: int | None

Maximum amount of events for individual requests.

resources: list[WazuhAgentMsGraphResourceConfiguration]

List of Microsoft Graph log sources.

run_on_start: bool = True

Indicates whether the module will be executed on agent start.

time_delay: int | None

Delay in seconds the module will wait before collecting logs.

version: str | None

Configured version of the Microsoft Graph API.

On this page