SIEM Template

Manage the message templates for SIEM servers.

📄️Create a SIEM template

Creates a SIEM template and returns the saved template. Use it to define the message format that is sent to a SIEM server.

📄️Update a SIEM template

Replaces the settings of an existing SIEM template. The id in the request body identifies the template; send every field, because fields you leave out are cleared.

📄️List available SIEM template attributes

Returns the names of the event attributes that a SIEM template can include. In a template format, write an attribute name in upper case between percent signs, for example %EVENTTIMEUTC%.

📄️List SIEM template names and IDs

Returns the ID and name of every SIEM template. Use it to populate a template picker.

📄️Delete a SIEM template

Deletes the SIEM template with the given ID. Use it to remove a template that is no longer needed.

📄️Get a SIEM template by ID

Returns the full SIEM template with the given ID, including its format and escape settings.