---
title: "List SIEM Log Sources"
method: GET
path: "/v1/siem/log_sources"
tags: ["SIEM"]
---

# List SIEM Log Sources

`GET /v1/siem/log_sources`

## Request

- Base URL: `https://api.huntress.io`
- URL: `https://api.huntress.io/v1/siem/log_sources`
- Auth: `basic` (a scheme the document does not define)

Shows the SIEM log sources associated with an account.

This endpoint requires a [user-based API key](https://support.huntress.io/hc/en-us/articles/4416826761235-Generating-API-Keys) with the appropriate permissions to access this endpoint.

## Query parameters

- `limit` integer
- `page_token` string
- `only_for_account` boolean
- `organization_id` integer
- `type_code` string

## Response `200`

List SIEM Log Sources

- object
  - `log_sources` LogSource[]
    - `id` integer: A unique identifier a log source.
    - `name` string: The name of this log source.
    - `agent` unknown
    - `organization` unknown
    - `last_processed_at` string, date-time: A timestamp for when the log source last processed an event, formatted as per ISO-8601.
    - `last_thirty_days_data_gb` number, float: Sum of data processed over the last 30 days, calculated value will not exceed 3 decimal places.
    - `status` 'active' | 'connecting' | 'disconnected' | 'free' | 'inactive': The status of the log source.
    - `type_code` string: A stable identifier for the kind of Log Source, safe to branch on in code. It is not a display string and will not change wording.
  - `pagination` Pagination: Pagination model
    - `next_page_url` string
    - `next_page_token` string

## Other responses

- `400`: Something about the request is malformed.
- `403`: There was an issue with your API credential or permissions.

## Changes

- **2026-09-23** `4dad97b21054`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/huntress/apis/huntress-api-reference/changes/v1/siem/log_sources/get.md)

---

[API](https://skmtc.dev/huntress/apis/huntress-api-reference.md) - [All operations](https://skmtc.dev/huntress/apis/huntress-api-reference/llms.txt) - [OpenAPI document](https://skmtc.dev/huntress/apis/huntress-api-reference/revisions/f593a257b4cc?raw)