Skip to main content

Who is this article for?

Incydr
Code42 for Enterprise
CrashPlan for Enterprise

Incydr, yes.

CrashPlan for Enterprise, no.

Code42 for Enterprise, yes.

CrashPlan for Small Business, no.

This article applies to Code42 cloud environments.

HOME
GETTING STARTED
RELEASE NOTES
FAQs
APIs
SYSTEM STATUS
Code42 Support

Data Connections reference

Who is this article for?

Incydr
Code42 for Enterprise
CrashPlan for Enterprise

Incydr, yes.

CrashPlan for Enterprise, no.

Code42 for Enterprise, yes.

CrashPlan for Small Business, no.

This article applies to Code42 cloud environments.

Overview

Use the Data Connections page in the Code42 console to add and manage third-party services that are connected to Code42. 

Data Connections

To add and manage data connections, go to Administration > Integrations > Data Connections.
Cloud and email service connections are not available in the Code42 federal environment.

Data connections list

Item Description
a Add data connection Adds and configures a new cloud or email service data connection. For details about adding an automated integration, see Configure automated integrations.
b Service

Displays the cloud service, email service, or automated integration data connection:

  • Cloud services
    • Box

    • Google Drive
    • Microsoft OneDrive for Business
  • Email services
    • Google Gmail
    • Microsoft Office 365 DLP
  • Automated integrations
c Service Type Displays the data connection type, either Cloud, Email, or Automated integration.
d Display Name

Displays the name you use to distinguish between connections. For example, if your organization has two different Google Workspace accounts for US and UK employees, you could name each account's Google Drives to help identify them as such. This name must be unique.

e Status

Displays the status of the connection between Code42 and the data connection. For details, see Data connection statuses.

f

View details View details

Click to view more information about that connection.

Data connection details

For any connection listed in the Data Connections table, click View details View details to view more information.

Cloud and email services

Data source details

Item Description
a Display name

The name given to the data connection when it was set up.

b Service

The cloud service (Box, Google Drive, or Microsoft OneDrive for Business) or email service (Google Gmail or Microsoft Office 365 DLP).

c Service type The data connection type, either Cloud or Email.
d Scoped to

The scope used to identify what to monitor for the connection:

  • For cloud services, the drives that are monitored. Code42 can monitor the drives for all users, drives of specific users, or drives of users in specific groups. For Google Drive, all shared drives are monitored. 
  • For email services, email accounts for all users are monitored.
e Status

The status of the connection between Code42 and the cloud or email service. For details, see Data connection statuses.

f Status history

A brief history of the data connection, including the date the connection was initially added along with the username of the Code42 administrator that configured the connection. The date and time does not update if you deauthorize and then resume monitoring the cloud or email service.

g Deauthorize / Resume monitoring Click to deauthorize the cloud or email service, or to resume monitoring a service that has been deauthorized.

This action is not available for cloud or email services with a status of Searching for drives/email accounts, Maintenance, Deauthorizing, or Deleting.

Automated integrations 

The details shown for automated integrations varies based on the type of connection. For more information, see Configure automated integrations

Data connection statuses

The Data Connections table's Status column displays the status of Code42's connection to the service or integration. For cloud services, more specific drive information appears on the details panel under Status.

Cloud and email services

Status Description

Searching for drives/email accounts

Code42 has connected to the cloud or email service and is discovering all of the drives that are within scope and all email accounts in your environment.

 

For email services, this initialization process does not index user inboxes. Instead, Code42 discovers all email accounts in your environment and registers them for monitoring. 

 

While the email accounts that have completed registration with Code42 begin reporting ongoing attachment activity immediately, the email service connection does not transition to the Monitoring status until all user email accounts in your environment are discovered and have completed registration.

Deauthorization is unavailable for services with this status
You cannot deauthorize a cloud or email service's connection when it is in this status. Wait for the status to move to either Monitoring or Monitoring, indexing in progress to deauthorize it. 

Monitoring, indexing in progress

(Cloud services only)

Once you complete authorization, Code42 immediately begins monitoring your cloud service environment for ongoing file activity. At the same time, Code42 indexes all of the files for all discovered drives that are within scope to gather baseline data. File events become available in Code42 soon after they occur. If file activity occurs for an un-indexed file, that file is immediately indexed and subsequent file activity is sent to Code42. 

 

This initial indexing does not calculate hash values for files. Instead, hashes are calculated when subsequent activity for that file is detected.

 

The details panel for a cloud service lists the total number of drives that Code42 has discovered in your environment and is monitoring for ongoing activity. Of this total, we then list the number of drives that are currently being indexed along with the number of drives for which indexing is complete. A second section lists similar values for shared or team drives in Google Drive.

 

After all drives have been indexed, the cloud service connection status transitions to the Monitoring status. As drives are created or added to scope, this status briefly changes back to "Monitoring, indexing in progress" to indicate these new drives are discovered and have started indexing.

Monitoring

Cloud services

Code42 has discovered all in-scope user drives and has completed the initial indexing of those drives. Code42 is monitoring for ongoing file activity while also checking for new files. Any new files discovered during monitoring are hashed. By default Code42 checks the cloud service every 5 minutes for new files and the latest file activity.

 

Code42's discovery of new drives added to your environment depend on the cloud service:

  • New Box drives are discovered within a few minutes of their creation
  • New drives added to Google Drive and OneDrive environments are discovered within 8 hours

All drives are indexed immediately after discovery.

 

Email services

Code42 is connected to the email service and is monitoring outbound email activity for file attachments. All email accounts are monitored. New email accounts are discovered at midnight and are registered for monitoring.

Maintenance Code42 is currently performing maintenance on the data connection. The service is still being monitored for file or email activity, but these events won't be displayed in Code42 until maintenance completes. After maintenance completes, Code42 displays all file events collected during that maintenance period.
Error

There was an error connecting to the cloud or email service. This typically occurs when a majority of user drives or email accounts are inaccessible to Code42 due to permissions or licensing issues within the cloud or email service. This can also occur immediately after a service is authorized if that service is already registered to Code42.

 

To address common errors, deauthorize and resume monitoring that data connection. Contact our Customer Champions for support with persistent errors.

Deauthorizing Code42 is removing its authorization to monitor the cloud or email service. For services with a large number of drives or email accounts that are monitored by Code42, this process may take an hour or longer. When this process completes, the status moves to Deauthorized.
Deauthorized

Code42's connection to the cloud or email service has been removed and no new event activity is being collected. The service remains deauthorized and is listed in the table for 90 days following the date of deauthorization. All discovered drives, email accounts, and existing file events remain in Code42 for those 90 days and can be viewed in Forensic Search.

 

Once the 90-day period expires, Code42 deletes its connection to the service along with all information collected. To resume monitoring the service after deletion, you need to re-authorize it.

Deleting Code42 is removing its connection to the cloud or email service and deleting any information about that service, such as initialized drive information and collected file events. For services with a large number of drives or email accounts that are monitored by Code42, this process may take an hour or longer. When this process completes, the service is removed from the Data Connections table.

Automated integrations 

Status Description

Connected

The automated integration connection is configured and data is flowing to or from Code42, depending on the type of automated integration. 

Disconnected

The automated integration connection is not sending or receiving data. However, the connection remains configured and available. 

 

To disable and remove the automated integration completely, contact your Customer Success Manager (CSM) to engage the Code42 Professional Services team.  

Add data connection

To add a cloud or email service connection, click Add Data Connection.

For automated integrations, Code42 Professional Services adds the connection for you. 

Add data connection

Item Description
a Data Connection

Selects the service to add:

For automated integrations, Code42 Professional Services adds the connection for you. See Configure automated integrations for details.

b Display Name The name you use to distinguish between services, for example, for different Google Drive accounts for US employees and UK employees. This name must be unique.
  • Was this article helpful?