Important Update: Cohesity Products Documentation
All Cohesity product documentation are now managed via the Cohesity Docs Portal: https://docs.cohesity.com/HomePage/Content/home.htm. Some documentation available here may not reflect the latest information or may no longer be accessible.
Arctera™ Capture Configuration Guide
- INTRODUCTION
- DASHBOARD
- IMPORTERS
- Adding a New Importer
- Managing an Importer
- File-Based Collector Options
- Amazon S3
- Audio Video
- BlackBerry
- Bloomberg
- Box
- CellTrust
- Chatter
- Chatter Cipher Cloud
- Cisco Webex Teams
- Citrix Workspace & ShareFile
- Cloud9
- ChatGPT
- Copilot
- Dropbox Business
- Dubber Speik Recordings
- Dubber Speik SMS
- EML
- EWS
- Exchange Graph API
- FX Connect
- Google Messages
- Google Drive
- IceChat
- iMessage
- JSON
- LSEG (Refinitiv)
- Microsoft Teams
- Microsoft Teams for Audio and Video
- Microsoft Teams via Webhooks
- NTR-X
- OneDrive for Business
- Pivot
- Redtail Speak
- RingCentral
- ServiceNow
- SharePoint
- Slack eDiscovery
- Symphony
- Text-Delimited
- X (Twitter)
- UBS
- Web Page Capture
- Workplace from Facebook
- XIP
- XSLT/XML
- Verba
- Verint
- Viva Engage (Yammer)
- Yieldbroker
- YouTube
- Zoom Chat
- Zoom Meetings
- Zoom Meetings Chats
- Zoom Meetings via Archiving API
- Zoom Phone
- MONITORED USERS
- FILTERS
- TARGETS
- SETTINGS
- CAPTURE NOTIFICATIONS
- REPORTS
- APPENDIX
Configuring Webhook Settings
Your listener endpoint must meet the following requirements:
Use an HTTPS URL.
Be able to receive HTTPS POST requests.
Return a 2xx HTTPS status code to confirm that the notification was received successfully.
If Arctera Capture receives a non-2xx response, it may attempt to redeliver the notification.
Example in Node.js:
{
"CreatedDate": "2025-12-26T09:35:20.000Z",
"SentTime": "2025-12-26T09:35:18.000Z",
"Title": "Monitored users skipped",
"Body": "3 user(s) do not have proper M365 license. Skip reason: \"API Error - (402) PaymentRequired\"",
"BodyType": 0, //PlainText
"Severity": 2, //Warning
"Source": "Importer",
"ImporterId": "1385ee6d-b1cd-4532-9c34-67b0af710cdc",
"ImporterName": "ExportAPI",
"EventCode": 10002 //MonitoredUsersSkipped
}
The notification object sent to your listener endpoint may have the following structure:
CreatedDate: The date and time when the event was created.
SentDate: The date and time when the notification was sent.
Title: The event title.
Body: A detailed description of the event. In this case, it explains why monitored users were skipped.
BodyType: An integer that specifies the format of the Body. 0 represents PlainText.
Severity: An integer that represents the severity level of the event.
Source: The source that generated the event.
ImporterId: A unique identifier (GUID) for the specific importer that generated the event.
ImporterName: The name of the importer, which is "ExportAPI" here.
EventCode: A numerical code that represents the specific type of event. Indicates that 10002 corresponds to the "MonitoredUsersSkipped" event.
The list of error codes is represented in the below:
10000 - FileQuarantined: Quarantine file
10001 - FailedToQuarantineFile: Failed to quarantine file
10002 - MonitoredUsersSkipped: Monitored users skipped
30000 - TargetWebhookNotificationFailed: Failed to send webhook notification to target
40000 - ImportJobFinished: Import job finished
40001 - ImportJobFinishedWithFatalError: Import job finished with fatal error
40002 - ImportJobFinishedWithTransientError: Import job finished with transient error
40003 - ImportJobStopped: Import job stopped
40004 - ImportJobSuccessfullyCompleted: Import job successfully completed
40005 - NoDataCaptured: No data captured
40006 - ComponentDeleted: Component deleted
40007 - ImporterDeleted: Importer deleted
40008 - ImporterMetricDeviationDetected: Importer metric deviation detected
40009 - ImporterMetricAnomalyDetected: Importer metric anomaly detected