Sumo Netskope Collector Docker Image

A Docker container that runs your SumoLogic Netskope collector

The Dockerfile above runs the following:

• Python 3.7 in Debian Strech
• Sets the working directory as /root
• Copies the provided netskope.yaml file to the /root/ directory
• Installs the sumologic netskop collector using pip3
• Sets the python command to run at the container launch

Getting started

1. Download this git repo and extract it
2. Edit the netskope.yaml file:
   • Change the SUMO_ENDPOINT:
   • Change the TOKEN:
   • Change the NETSKOPE_EVENT_ENDPOINT:
   • Change the NETSKOPE_ALERT_ENDPOINT:
3. Make any other adjustments to your required collector settings in the netskope.yaml
4. Build your Docker image:
   • sudo docker build -t netskope
5. Run your Docker image:
   • sudo docker run netskope
6. If the container hangs for any reason:
   • sudo docker prune
7. Setup a crontab to run the container every 5 minutes
   • */5 * * * * root /usr/bin/docker run netskope
   • 30 * * * * root /usr/bin/docker container prune -f