Mimecast Integration

Elastic Stack Kibana
1

I am trying to integrate Mimecast into elastic using the integration setup in elastic. The url in the API call however defaults to "eu-api.mimecast" and I need to change it to "us-api.mimecast". How would I go about changing that API request? (Very new to elastic)

2

Welcome!

What kind of integration do you want? Do you have any documentation about what you're saying? I don't see how it relates to elasticsearch but may be I'm missing something.

3

Hi I'm not sure what kind of integration I want. I created the necessary keys and API calls in mimecast and fed them into elastic. When I didn't see any data I opened a support ticket with mimecast. They seem to think that in the API request from elastic it sets the url to eu-api.mimecast. When I try to change it in dev tools it just reverts back and when I run it with us-api.mimecast I still get an error so I feel like I've done something wrong.

"mimecast-httpjson": {
      "enabled": true,
      "vars": {
        "api_url": **"https://eu-api.mimecast.com",**
        "app_key": {
          "id": "{value redacted}",
          "isSecretRef": true
        },
        "app_id": {
          "id": "{value redacted}",
          "isSecretRef": true
        },

Like I said I'm very new to elastic. Would it be easier to create a custom document with the API call myself?

4

Where did you put this code? I have no idea about what it is.