How to setup the SIEM integration?
FireTail is designed primarily to integrate with SIEM or security data lake platforms that have public, RESTful APIs.
Integration features available
The FireTail SIEM integration is based on standard RESTful API patterns, with public URLs.
- Input the required URL and authentication data for your SIEM.
- Set thresholds and triggers for the SIEM integration.
- Configure the desired data package or payload.
- Observe incoming SIEM data.
Setup your integration
Log into the FireTail cloud platform to begin the integration. Enter the required URL and authentication credentials. Configure the desired payloads.