[okta-logs://<specify_name>]
host = <host-name>, Default is current system hostname
repo =  <repository-name>
frequency = <seconds>  Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
source = <source-name>
sourcetype = dataelicit/okta:okta-logs
domain = Organization Domainname Ex: yourdomain.okta.com
start_date = Start Date to start the data collection, in UTC timezone. Format: YYYY-MM-DDTHH:MM:SS.SSSZ
                Default: 1 month back
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

[okta-users://<specify_name>]
host = <host-name>, Default is current system hostname
repo =  <repository-name>
frequency = <seconds>  Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
source = <source-name>
sourcetype = dataelicit/okta:okta-users
domain = Organization Domainname Ex: yourdomain.okta.com
start_date = Start Date to start the data collection, in UTC timezone. Format: YYYY-MM-DDTHH:MM:SS.SSSZ
                Default: 1 month back
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

[okta-groups://<specify_name>]
host = <host-name>, Default is current system hostname
repo =  <repository-name>
frequency = <seconds>  Interval to run the input
cron = <cron-expression> 
        Note: Cron has higher priority and will be considered for scheduling instead of frequency, if both are defined.
        It is preferable to define only one, either cron or frequency.
source = <source-name>
sourcetype = dataelicit/okta:okta-groups
domain = Organization Domainname Ex: yourdomain.okta.com
start_date = Start Date to start the data collection, in UTC timezone. Format: YYYY-MM-DDTHH:MM:SS.SSSZ
                Default: 1 month back
secret = <secret-stanza-name>
global = <global-stanza-name>
disabled = 0/1

[okta-logs://auditlogs]
sourcetype = dataelicit/okta:okta-logs
frequency = 300
global = okta
secret = okta-creds

[okta-users://userdata]
sourcetype = dataelicit/okta:okta-users
cron = 0 0 1 * *
global = okta
secret = okta-creds

[okta-groups://groupsdata]
sourcetype = dataelicit/okta:okta-groups
cron = 0 0 1 * *
global = okta
secret = okta-creds