SIEM Event Delivery APIs

API endpoints available for use with the SIEM Event Delivery Service. SIEM (Security Information and Event Management) is a recognized standard for collecting, aggregating, and analyzing events within an IT organization.

EndpointMethods

Activate the SIEM Event Service

/eventdelivery/activate
Add an Identity Cloud application to the SIEM Event Delivery service.
  • POST

Deactivate the SIEM Event Service

/eventdelivery/deactivate
Removes an application from the SIEM Event Delivery service.
  • POST

View the SIEM Event Service Activation Status

/eventdelivery/readStatus
View the activation/deactivation status for an application.
  • GET

List Your SIEM Event Service Public Keys

/eventdelivery/readKeys
View the public keys associated with an application.
  • GET

Assign a Public Key to the SIEM Event Service

/eventdelivery/addKeys
Add one or more public keys to an application.
  • POST

Delete a SIEM Event Service Public Key

/eventdelivery/deleteKeys
Remove one or more public keys from an application.
  • POST

View the SIEM Event Service Blocklist

/eventdelivery/readBlocklist
View an application's SIEM Event Delivery Service event blocklist.
  • GET

Add an Event to the SIEM Event Service Blocklist

/eventdelivery/addBlocklist
Add one or more events to an application's blocklist.
  • POST

Delete an Event from the SIEM Event Service Blocklsit

/eventdelivery/deleteBlocklist
Remove one or more events from an application's blocklist.
  • POST