Security monitoring reporting

Configuration keys for Elevate24 security monitoring reporting.

NOTE

Preference Domain: com.jigsaw24.Elevate24SecurityExtension

---

Max data upload size

• Availability: Premium
• Type: Integer
• Default: 1000000

The maximum size of a single HTTP request when uploading data. Specified in bytes (uncompressed). The default is 1,000,000 bytes (1 MB).

<key>MaxDataUploadSize</key>
<integer>1000000</integer>

---

Microsoft Sentinel

• Availability: Premium
• Type: String

Enables sending Elevate24 security logs to Microsoft Sentinel via the Logs Ingestion API.

<key>SentinelClientId</key>
<string>Your-Client-ID</string>

<key>SentinelClientSecret</key>
<string>Your-Client-Secret</string>

<key>SentinelTennantId</key>
<string>Your-Tenant-ID</string>

<key>SentinelUploadURL</key>
<string>https://your-dce.ingest.monitor.azure.com/...</string>

Parameters

Key	Type	Description
SentinelClientId	String	The Application (client) ID of the Azure AD app registration
SentinelClientSecret	String	The client secret generated for the Azure AD app registration
SentinelTennantId	String	The Directory (tenant) ID of your Azure AD tenant
SentinelUploadURL	String	The Data Collection Rule endpoint URL for log ingestion

TIP

Refer to the Microsoft documentation for guidance on obtaining these values:

• Logs Ingestion API overview
• Tutorial: Send data to Azure Monitor Logs

---

SIEM

• Availability: Premium
• Type: String

Enables sending Elevate24 security events to a third-party SIEM via HTTP. Events are uploaded in JSON format as an array by default. Use siemNewLineSeperated if your SIEM requires newline-delimited JSON (NDJSON).

<key>siemUploadURL</key>
<string>https://your-siem-endpoint.example.com/ingest</string>

<key>siemNewLineSeperated</key>
<true/>

<key>siemUploadHeaders</key>
<array>
	<dict>
		<key>Header</key>
		<string>Authorization</string>
		<key>Value</key>
		<string>Bearer your-token</string>
	</dict>
</array>

Parameters

Key	Type	Required	Description
siemUploadURL	String	Yes	The HTTP endpoint URL to send security events to
siemNewLineSeperated	Boolean	No	When true, events are separated by a newline character instead of being wrapped in a JSON array. Required by some SIEMs that expect NDJSON format.
siemUploadHeaders	Array	No	HTTP headers to include with each upload request, e.g. for authentication. Each entry requires a Header name and a Value.