FIfiles
siem_http_destinations
SIEM HTTP Destinations

send_test_entry SIEM HTTP Destination

Changed on

send_test_entry SIEM HTTP Destination

post/siem_http_destinations/send_test_entry

Request

  • Base URL
    https://app.files.com/api/rest/v1
  • URL
    https://app.files.com/api/rest/v1/siem_http_destinations/send_test_entry
  • Auth
    none declared

Request body multipart/form-data

siem_http_destination_idinteger

SIEM HTTP Destination ID

destination_type'generic' | 'splunk' | 'azure_legacy' | 'qradar' | 'sumo' | 'rapid7' | 'solar_winds' | 'new_relic' | 'datadog' | 'azure' | 'file' | 'crowdstrike' | 'splunk_compatible'

Destination Type

destination_urlstring

Destination Url

namestring

Name for this Destination

additional_headersobject

Additional HTTP Headers included in calls to the destination URL

sending_activeboolean

Whether this SIEM HTTP Destination is currently being sent to or not

generic_payload_type'json_newline' | 'json_array'

Applicable only for destination type: generic. Indicates the type of HTTP body. Can be json_newline or json_array. json_newline is multiple log entries as JSON separated by newlines. json_array is a single JSON array containing multiple log entries as JSON.

file_destination_pathstring

Applicable only for destination type: file. Destination folder path on Files.com.

file_format'json' | 'csv'

Applicable only for destination type: file. Generated file format.

file_interval_minutesinteger

Applicable only for destination type: file. Interval, in minutes, between file deliveries. Valid values are 5, 10, 15, 20, 30, 60, 90, 180, 240, 360.

splunk_tokenstring

Applicable only for destination types: splunk, splunk_compatible. Authentication token for the destination.

crowdstrike_tokenstring

Applicable only for destination type: crowdstrike. Authentication token provided by Crowdstrike.

azure_dcr_immutable_idstring

Applicable only for destination types: azure, azure_legacy. Immutable ID of the Data Collection Rule.

azure_stream_namestring

Applicable only for destination type: azure. Name of the stream in the DCR that represents the destination table.

azure_oauth_client_credentials_tenant_idstring

Applicable only for destination types: azure, azure_legacy. Client Credentials OAuth Tenant ID.

azure_oauth_client_credentials_client_idstring

Applicable only for destination types: azure, azure_legacy. Client Credentials OAuth Client ID.

azure_oauth_client_credentials_client_secretstring

Applicable only for destination type: azure. Client Credentials OAuth Client Secret.

qradar_usernamestring

Applicable only for destination type: qradar. Basic auth username provided by QRadar.

qradar_passwordstring

Applicable only for destination type: qradar. Basic auth password provided by QRadar.

solar_winds_tokenstring

Applicable only for destination type: solar_winds. Authentication token provided by Solar Winds.

new_relic_api_keystring

Applicable only for destination type: new_relic. API key provided by New Relic.

datadog_api_keystring

Applicable only for destination type: datadog. API key provided by Datadog.

action_send_enabledboolean

Whether or not sending is enabled for action logs.

sftp_action_send_enabledboolean

Whether or not sending is enabled for sftp_action logs.

ftp_action_send_enabledboolean

Whether or not sending is enabled for ftp_action logs.

web_dav_action_send_enabledboolean

Whether or not sending is enabled for web_dav_action logs.

sync_send_enabledboolean

Whether or not sending is enabled for sync logs.

outbound_connection_send_enabledboolean

Whether or not sending is enabled for outbound_connection logs.

automation_send_enabledboolean

Whether or not sending is enabled for automation logs.

api_request_send_enabledboolean

Whether or not sending is enabled for api_request logs.

public_hosting_request_send_enabledboolean

Whether or not sending is enabled for public_hosting_request logs.

email_send_enabledboolean

Whether or not sending is enabled for email logs.

exavault_api_request_send_enabledboolean

Whether or not sending is enabled for exavault_api_request logs.

settings_change_send_enabledboolean

Whether or not sending is enabled for settings_change logs.

Example request

{
  "destination_type": "example",
  "destination_url": "example",
  "name": "example",
  "additional_headers": {
    "key": "example value"
  },
  "sending_active": true,
  "generic_payload_type": "example",
  "file_destination_path": "example",
  "file_format": "example",
  "azure_dcr_immutable_id": "example",
  "azure_stream_name": "example",
  "azure_oauth_client_credentials_tenant_id": "example",
  "azure_oauth_client_credentials_client_id": "example",
  "qradar_username": "example",
  "action_send_enabled": true,
  "sftp_action_send_enabled": true,
  "ftp_action_send_enabled": true,
  "web_dav_action_send_enabled": true,
  "sync_send_enabled": true,
  "outbound_connection_send_enabled": true,
  "automation_send_enabled": true,
  "api_request_send_enabled": true,
  "public_hosting_request_send_enabled": true,
  "email_send_enabled": true,
  "exavault_api_request_send_enabled": true,
  "settings_change_send_enabled": true
}

Response

No body.

Changes