SIEM Event Delivery APIs

API endpoints available for use with the SIEM Event Delivery Service. SIEM (Security Information and Event Management) is a recognized standard for collecting, aggregating, and analyzing events within an IT organization.


 

Endpoint Methods
/eventdelivery/activate
Add an Identity Cloud application to the SIEM Event Delivery service.
  • POST
/eventdelivery/deactivate
Removes an application from the SIEM Event Delivery service.
  • POST
/eventdelivery/readStatus
View the activation/deactivation status for an application.
  • GET
/eventdelivery/readKeys
View the public keys associated with an application.
  • GET
/eventdelivery/addKeys
Add one or more public keys to an application.
  • POST
/eventdelivery/deleteKeys
Remove one or more public keys from an application.
  • POST
/eventdelivery/readBlocklist
View an application's SIEM Event Delivery Service event blocklist.
  • GET
/eventdelivery/addBlocklist
Add one or more events to an application's blocklist.
  • POST
/eventdelivery/deleteBlocklist
Remove one or more events from an application's blocklist.
  • POST