[audit-github://<specify_name>]
host = <host-name>, Default is current system hostname
repo =  <repository-name>
frequency = <seconds>   Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
source = <source-name>
sourcetype = dataelicit/github:github-audit
account_type = Organization | Enterprise
org_name = Name of Organization/Enterprise in Github
event_type = all | web | git
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

[users-github://<specify_name>] 
host = <host-name>, Default is current system hostname
repo =  <repository-name>
frequency = <seconds> Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
source = <source-name>
sourcetype = dataelicit/github:github-users  
org_name = Name of Organization/Enterprise in Github
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

[audit-github://audit-logs]
source = github
sourcetype = dataelicit/github:github-audit
frequency = 86400
account_type = Organization
org_name = DataElicitSolutions
event_type = all
secret = gitpat
global = github

[users-github://user-data]
source = github
sourcetype = dataelicit/github:github-users
cron = 0 0 1 * *
org_name = DataElicitSolutions
secret = gitpat
global = github