HUhuntress
SIEM

List SIEM Log Sources

Changed on

Shows the SIEM log sources associated with an account.

This endpoint requires a user-based API key with the appropriate permissions to access this endpoint.

get/v1/siem/log_sources

Request

  • Base URL
    https://api.huntress.io
  • URL
    https://api.huntress.io/v1/siem/log_sources
  • Auth
    basic (a scheme the document does not define)

Query parameters

limitinteger

Max number of resources returned in a paged collection. Defaults to 10, with a minimum of 1 and maximum 500.

page_tokenstring

Token used to request the next page in paginated results. Defaults to 'null'

only_for_accountboolean

Filter by Log Sources that are only configured for an account and not configured for any organizations.

organization_idinteger

Filter by organization ID within Huntress account.

type_codestring

Filter by Log Sources of a specific type using its machine-readable code.

Response

List SIEM Log Sources

Example response

{
  "log_sources": [
    {
      "id": 119,
      "name": "dc01-syslog",
      "agent": {
        "id": 157,
        "hostname": "My Agent"
      },
      "organization": {
        "id": 1234,
        "name": "ExampleCo"
      },
      "last_processed_at": "2022-03-01T20:05:10Z",
      "last_thirty_days_data_gb": 3.145,
      "status": "active",
      "type_code": "meraki_cloud"
    }
  ]
}

Changes