From ba3211d1461bf6f6b8fd778b335b53b5909536b8 Mon Sep 17 00:00:00 2001
From: nitsan-tzur <153099157+nitsan-tzur@users.noreply.github.com>
Date: Thu, 30 Jan 2025 11:12:51 -0500
Subject: [PATCH] Change custom telemetry headers

---
 .../CyberArk Audit/CyberArk-Audit-Workflow.xml             | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/Community Developed/CyberArk Audit/CyberArk-Audit-Workflow.xml b/Community Developed/CyberArk Audit/CyberArk-Audit-Workflow.xml
index b07aac4..86d1177 100644
--- a/Community Developed/CyberArk Audit/CyberArk-Audit-Workflow.xml	
+++ b/Community Developed/CyberArk Audit/CyberArk-Audit-Workflow.xml	
@@ -93,12 +93,7 @@
 				<RequestHeader name="Authorization" value="Bearer ${/access_token}" />
 				<RequestHeader name="content-type" value="application/json" />
 				<RequestHeader name="x-api-key" value="${/api_key}" />
-				<RequestHeader name="IntegrationName" value="IBM QRadar" />
-				<RequestHeader name="IntegrationType" value="SIEM" />
-				<RequestHeader name="IntegrationVersion" value="1.0" />
-				<RequestHeader name="CyberArkService" value="Audit" />
-				<RequestHeader name="VendorName" value="IBM" />
-				<RequestHeader name="VendorProductName" value="QRadar" />
+				<RequestHeader name="x-cybr-telemetry" value="aW49SUJNIFFyYWRhciBBdWRpdCZpdj0xLjAmdm49SUJNJml0PVNJRU0=" />
 				<RequestBody type="application/json" encoding="UTF-8">${/create_query_body}</RequestBody>
 			</CallEndpoint>
 			<Log type="INFO" message="CyberArk Audit: createQuery status code:: ${/create_query/status_code}" />