[account://<stanza-name>]
sourcetype = dataelicit/duo:duo-account-log
host = <host-name>, Default is current system hostname
source = <source-name>, Default is stanza-name
repo =  <repository-name>
frequency = <seconds>  
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

[activity://<stanza-name>]
sourcetype = dataelicit/duo:duo-activity-log
host = <host-name>, Default is current system hostname
source = <source-name>, Default is stanza-name
repo =  <repository-name>
frequency = <seconds>   
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

[admin-actions://<stanza-name>]
sourcetype = dataelicit/duo:duo-administrator-log
host = <host-name>, Default is current system hostname
source = <source-name>, Default is stanza-name
repo =  <repository-name>
frequency = <seconds>   
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

[authentication://<stanza-name>]
sourcetype = dataelicit/duo:duo-authentication-log
host = <host-name>, Default is current system hostname
source = <source-name>, Default is stanza-name
repo =  <repository-name>
frequency = <seconds>   
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

[endpoints://<stanza-name>]
sourcetype = dataelicit/duo:duo-endpoints-log
host = <host-name>, Default is current system hostname
source = <source-name>, Default is stanza-name
repo =  <repository-name>
frequency = <seconds>   
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

[telephony://<stanza-name>]
sourcetype = dataelicit/duo:duo-telephony-log
host = <host-name>, Default is current system hostname
source = <source-name>, Default is stanza-name
repo =  <repository-name>
frequency = <seconds>   
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

[trustmonitor://<stanza-name>]
sourcetype = dataelicit/duo:duo-trustmonitor-log
host = <host-name>, Default is current system hostname
source = <source-name>, Default is stanza-name
repo =  <repository-name>
frequency = <seconds>   
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

[account://duo-account-info]
sourcetype = dataelicit/duo:duo-account-log
cron = 0 0 1 * *
secret = duo_creds
global = duo

[activity://duo-activity]
sourcetype = dataelicit/duo:duo-activity-log
frequency = 300
secret = duo_creds
global = duo

[admin-actions://duo-admin-actions]
sourcetype = dataelicit/duo:duo-administrator-log
frequency = 300
secret = duo_creds
global = duo

[authentication://duo-authentication]
sourcetype = dataelicit/duo:duo-authentication-log
frequency = 300
secret = duo_creds
global = duo

[endpoints://duo-endpoints-info]
sourcetype = dataelicit/duo:duo-endpoints-log
cron = 0 0 1 * *
secret = duo_creds
global = duo

[telephony://duo-telephony]
sourcetype = dataelicit/duo:duo-telephony-log
cron = 0 0 1 * *
secret = duo_creds
global = duo

[trustmonitor://trustmonitor]
sourcetype = dataelicit/duo:duo-trustmonitor-log
frequency = 300
secret = duo_creds
global = duo