Skip to content

Product documentation

Siem

SIEM audit-event streaming configuration.

Siem

SIEM audit-event streaming configuration.

Base URL: https://api.stg.thoryn.org

Operations

MethodPathSummaryScopes
GET/api/v1/siem/sinksSiem List Sinkstenant:siem.read
POST/api/v1/siem/sinksSiem Configure Sinktenant:siem.write
DELETE/api/v1/siem/sinks/{id}Siem Delete Sinktenant:siem.write
GET/api/v1/siem/sinks/{id}/healthSiem Sink Healthtenant:siem.read

Operation details

GET /api/v1/siem/sinks

Siem List Sinks

  • Operation ID: siemListSinks
  • Required scopes: tenant:siem.read

Parameters:

NameInRequiredTypeDescription
limitquerynointeger
cursorquerynostring

Responses:

StatusDescriptionBody
200OKListEnvelopeSiemSinkResponse
401Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.Problem (problem+json)
403Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.Problem (problem+json)

POST /api/v1/siem/sinks

Siem Configure Sink

  • Operation ID: siemConfigureSink
  • Required scopes: tenant:siem.write

Request body (required): application/jsonConfigureSiemSinkRequest

Responses:

StatusDescriptionBody
200OKobject
401Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.Problem (problem+json)
403Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.Problem (problem+json)

DELETE /api/v1/siem/sinks/{id}

Siem Delete Sink

  • Operation ID: siemDeleteSink
  • Required scopes: tenant:siem.write

Parameters:

NameInRequiredTypeDescription
idpathyesstring

Responses:

StatusDescriptionBody
200OKobject
401Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.Problem (problem+json)
403Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.Problem (problem+json)

GET /api/v1/siem/sinks/{id}/health

Siem Sink Health

  • Operation ID: siemSinkHealth
  • Required scopes: tenant:siem.read

Parameters:

NameInRequiredTypeDescription
idpathyesstring

Responses:

StatusDescriptionBody
200OKobject
401Unauthorized — bearer token missing, expired, signed by an untrusted issuer, or missing the tnt tenant claim.Problem (problem+json)
403Forbidden — token lacks a required tenant:* scope, or the tnt claim does not match the tenant addressed by the request path.Problem (problem+json)