---
title: "Create a new SIEM integration"
method: POST
path: "/integrations/siem"
tags: ["integrations"]
---

# Create a new SIEM integration

`POST /integrations/siem`

Create a new SIEM integration

## Request body

- object
  - `name` string, required
  - `siemSettings` SIEMSettingsInput, required
    - `findingTriggers` object[], required
    - `integrationTriggers` object, required
    - `isActive` boolean, required
    - `serviceTriggers` object[], required
    - `syslogFacility` integer, required
    - `syslogHostname` string, required
    - `syslogPort` integer, required
    - `tlsConfiguration` object

## Response `200`

Create a new SIEM integration

- CreateSIEMIntegrationResponse
  - `integration` object, required
    - `id` string, required

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `408` — Request Timeout
- `409` — Conflict
- `422` — Unprocessable Entity
- `500` — Internal Server Error
- `default`

## Changes

> 33 revisions in range; 1 could not be searched.

- **2025-04-16** `6b4369907cb8` — 1 info
  - endpoint added
- **2023-01-25** `059555a56f3f` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/otterize/apis/otterize-api-server/changes/integrations/siem/post.md)

---

[API](https://skmtc.dev/otterize/apis/otterize-api-server.md) · [All operations](https://skmtc.dev/otterize/apis/otterize-api-server/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/otterize/otterize-api-server/revisions/ec9167824493/schema)