[Collection] Saviynt Enterprise Identity Cloud #41306

samuelFain · 2025-09-14T16:56:03Z

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

In Progress
Ready
In Hold - (Reason for hold)

Related Issues

fixes: https://jira-dc.paloaltonetworks.com/browse/CIAC-12912

Description

Introduce new Event Collector: Saviynt Enterprise Identity Cloud (EIC).

Must have

Tests
Documentation

…integration

…or Saviynt EIC

…n logic

…revious run

…r handling in SaviyntEIC integration

…gging clarity

…up guide

…llector

github-actions · 2025-09-14T17:01:20Z

Coverage Report

File	Stmts	Miss	Cover	Missing
Packs/SaviyntEIC/Integrations/SaviyntEICEventCollector
SaviyntEICEventCollector.py	212	59	72%	61–62, 75–76, 80, 86–89, 91–92, 99, 103, 118–119, 123, 129–134, 141, 145, 162–168, 170–171, 173, 177, 180–187, 190–191, 223, 254, 292–294, 323–324, 551, 553, 558–560, 562–563
TOTAL	212	59	72%

Tests	Skipped	Failures	Errors	Time
18	0 💤	0 ❌	0 🔥	2.470s ⏱️

JasBeilin

Nice, check my comments.

Packs/SaviyntEIC/pack_metadata.json

Packs/SaviyntEIC/README.md

Packs/SaviyntEIC/Integrations/SaviyntEICEventCollector/SaviyntEICEventCollector_description.md

Packs/SaviyntEIC/Integrations/SaviyntEICEventCollector/SaviyntEICEventCollector.yml

Packs/SaviyntEIC/Integrations/SaviyntEICEventCollector/SaviyntEICEventCollector.py

… integration

Packs/SaviyntEIC/Integrations/SaviyntEICEventCollector/SaviyntEICEventCollector.yml

Packs/SaviyntEIC/Integrations/SaviyntEICEventCollector/SaviyntEICEventCollector.py

JasBeilin

Nice!

…ent type; Naming updates; Lower default max events to 30000

Co-authored-by: Jasmine Beilin <[email protected]>

…n YAML

Packs/SaviyntEIC/Integrations/SaviyntEICEventCollector/SaviyntEICEventCollector.yml

talihaff · 2025-09-17T20:33:52Z

@samuelFain doc approved

content-bot · 2025-09-18T07:41:27Z

Validate summary
The following errors were thrown as a part of this pr: .
If the AG100 validation in the pre-commit GitHub Action fails, the pull request cannot be force-merged.

Verdict: PR can be force merged from validate perspective? ✅

JasBeilin

Nice!

samuelFain added 20 commits September 10, 2025 13:40

feat: Init Saviynt EIC event collector integration

f718477

refactor: improve token management and error handling in Saviynt EIC …

d735e9c

…integration

refactor: simplify event collection and add multi-analytics support f…

5a7c1f3

…or Saviynt EIC

refactor: implement get-events command and streamline event collectio…

f805fde

…n logic

feat: add event deduplication based on SHA-256 hash comparison with p…

c95f2c5

…revious run

feat: add debug logging to event hash generation and deduplication

42be459

docs: remove release notes for SaviyntEIC pack

b9178d7

feat: add configurable time frame for event fetching and improve erro…

cac713b

…r handling in SaviyntEIC integration

fix: pre-commit fixes

2dacc01

feat: add debug logging in Saviynt EIC event collector

b0c205c

feat: add timestamp tracking for event fetching to prevent time gaps

cd9cbb8

refactor: standardize event collection constants and improve debug lo…

76e2b40

…gging clarity

fix: set auth headers when using cached token in Saviynt EIC integration

dea2be3

docs: add Saviynt EIC Event Collector integration description and set…

2794e88

…up guide

docs: Saviynt EIC integration documentation

2a9e651

fix: improve error handling and debug logging in Saviynt EIC event co…

c2c9baf

…llector

fix: update UTs

07b957a

fix: handle timestamp parsing edge cases in SaviyntEIC event collector

e93b79b

add: add logo image file

9bed769

docs: update README and configuration with clearer descriptions

b2e8732

samuelFain self-assigned this Sep 14, 2025

chore: remove platform from SaviyntEIC pack marketplaces list

e91327c

feat: update docs

6c498f5

samuelFain added the ready-for-pipeline-running Whether the pr is ready for running the whole pipeline, including testing on SAAS machines label Sep 14, 2025

samuelFain marked this pull request as ready for review September 14, 2025 17:54

samuelFain requested a review from JasBeilin September 14, 2025 17:54

Merge branch 'master' into sf-saviynt-eic-collector

9a90a3a

richardbluestone requested a review from talihaff September 15, 2025 06:08

JasBeilin requested changes Sep 16, 2025

View reviewed changes

samuelFain added 8 commits September 16, 2025 13:45

docs: update Saviynt EIC description and command usage notes

29f0e0e

feat: implement concurrent page fetching for Saviynt EIC event collector

ea32606

refactor: improve code documentation and thread naming in Saviynt EIC…

7536c49

… integration

docs: fix link placement for Saviynt API documentation reference

8782797

docs: update Saviynt EIC pack name and description with more details

7a74a05

docs: update Saviynt EIC product description for clarity and brevity

9a87381

docs: update Saviynt EIC product name and description in README

eedf2a3

fix: restore default fetch time and remove timeout from token request

354b170

samuelFain requested a review from JasBeilin September 17, 2025 09:28

JasBeilin reviewed Sep 17, 2025

View reviewed changes

samuelFain and others added 3 commits September 17, 2025 15:51

refactor: simplify Saviynt integration to only fetch SIEMAuditLogs ev…

cb0784e

…ent type; Naming updates; Lower default max events to 30000

Apply suggestion from @JasBeilin

9669666

Co-authored-by: Jasmine Beilin <[email protected]>

fix: correct indentation for limit parameter in SaviyntEIC integratio…

aff8e83

…n YAML

talihaff reviewed Sep 17, 2025

View reviewed changes

Packs/SaviyntEIC/Integrations/SaviyntEICEventCollector/SaviyntEICEventCollector.yml Outdated Show resolved Hide resolved

talihaff added the docs-approved label Sep 17, 2025

samuelFain and others added 2 commits September 18, 2025 10:18

Doc review

76404cb

Merge branch 'master' into sf-saviynt-eic-collector

5592ed0

JasBeilin approved these changes Sep 18, 2025

View reviewed changes

samuelFain merged commit 3290480 into master Sep 18, 2025
19 checks passed

samuelFain deleted the sf-saviynt-eic-collector branch September 18, 2025 11:37

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Collection] Saviynt Enterprise Identity Cloud #41306

[Collection] Saviynt Enterprise Identity Cloud #41306

samuelFain commented Sep 14, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Sep 14, 2025 •

edited

Loading

Uh oh!

JasBeilin left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

JasBeilin left a comment

Uh oh!

Uh oh!

talihaff commented Sep 17, 2025 •

edited

Loading

Uh oh!

content-bot commented Sep 18, 2025

Uh oh!

JasBeilin left a comment

Uh oh!

Uh oh!

Uh oh!

[Collection] Saviynt Enterprise Identity Cloud #41306

[Collection] Saviynt Enterprise Identity Cloud #41306

Conversation

samuelFain commented Sep 14, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Contributing to Cortex XSOAR Content

Status

Related Issues

Description

Must have

Uh oh!

github-actions bot commented Sep 14, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

JasBeilin left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

JasBeilin left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

talihaff commented Sep 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

content-bot commented Sep 18, 2025

Uh oh!

JasBeilin left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

samuelFain commented Sep 14, 2025 •

edited

Loading

github-actions bot commented Sep 14, 2025 •

edited

Loading

talihaff commented Sep 17, 2025 •

edited

Loading