SIEM Event Delivery APIs

API endpoints available for use with the SIEM Event Delivery Service. SIEM (Security Information and Event Management) is a recognized standard for collecting, aggregating, and analyzing events within an IT organization.



EndpointMethods
/eventdelivery/activate
Add an Identity Cloud application to the SIEM Event Delivery service.
  • POST
/eventdelivery/deactivate
Removes an application from the SIEM Event Delivery service.
  • POST
/eventdelivery/readStatus
View the activation/deactivation status for an application.
  • GET
/eventdelivery/readKeys
View the public keys associated with an application.
  • GET
/eventdelivery/addKeys
Add one or more public keys to an application.
  • POST
/eventdelivery/deleteKeys
Remove one or more public keys from an application.
  • POST
/eventdelivery/readBlacklist
View an application's SIEM Event Delivery Service event blacklist.
  • GET
/eventdelivery/addBlacklist
Add one or more events to an application's blacklist.
  • POST
/eventdelivery/deleteBlacklist
Remove one or more events from an application's blacklist.
  • POST