Skip to main content

Create a SIEM server

POST 

/api/v1/SiemServer

Adds a SIEM server that receives events. The server assigns the name, so any name you send is ignored.

Permission required: Admin or App role.

Caution: The server is saved immediately and starts receiving events if it is enabled.

Request​

Responses​

The SIEM server was created. The body is the saved server, and the Location header points to it unless test is true.