SIEM Integration API

Number of APIs: 1

Use the Security Information and Event Management (SIEM) API to collect security event data from the Akamai platform and integrate it with other data sources within your SIEM solution. This API is compatible with events from Akamai products including API Protector, Kona Site Defender, Client Reputation, Web Application Protector, Bot Manager, and Account Protector.

You can capture security event data incrementally, or replay missed security events from the past 12 hours. You can store, query, and analyze the data delivered through this API on your end, then go back and adjust your Akamai security settings.

Authentication

Create an authentication credential that contains the client token and client secret required to authenticate Akamai API requests.

1. Navigate to the Identity and Access Management section of Akamai Control Center and click Create API Client.

Note: If you don't have access to the Identity and Access Management tool, contact your local Akamai Control Center admin or your Akamai account team for assistance.

1. Click Quick and then Download in the Credentials section.

Note: If you need to refine access levels or permissions, see Create a client with custom permissions.

1. Open the downloaded file with a text editor and add [default] as a header above all text.

  [default]
  client_secret = C113nt53KR3TN6N90yVuAgICxIRwsObLi0E67/N8eRN=
  host = akab-h05tnam3wl42son7nktnlnnx-kbob3i3v.luna.akamaiapis.net
  access_token = akab-acc35t0k3nodujqunph3w7hzp7-gtm6ij
  client_token = akab-c113ntt0k3n4qtari252bfxxbsl-yvsdj

1. Fork the [Akamai Authentication] environment, populate the variables, and [set it for your workspace]

Dependencies

• To enable this API, choose the API service named SIEM, and set the access level to READ-WRITE.
• Ensure that the Manage SIEM user role is assigned to your account in Control Center. Follow the instructions in the guide.

Integration methods

You can use this API collection in these integration methods: - API

1. Events - Fetch security events

GET https://{{host}}/siem/v1/configs/:configId

---