Skip to main content

List available SIEM template attributes

GET 

/api/v1/SiemTemplate/attributes

Returns the names of the event attributes that a SIEM template can include. In a template format, write an attribute name in upper case between percent signs, for example %EVENTTIMEUTC%.

Permission required: Administrator role (or an application account with the App role).

Request​

Responses​

An array of attribute names as strings.