Set up Cortex XDR for Integration

Set up Cortex XDR for integration with IoT Security through Cortex XSOAR.
Generate an advanced API key, which Cortex XSOAR will use when querying the XDR for device attributes. Copy and record the key string, its key ID, and XDR URL into a text editor, so you can enter them in the XSOAR UI when configuring an XDR integration instance.
  1. Generate an advanced API key.
    For more details about creating an API key in Cortex XDR, see Get Started with Cortex XDR APIs.
    1. Log in to Cortex XDR and select
      Settings
      Configurations
      Integrations
      API Keys
      .
    2. Select
      + New Key
      , enter the following settings, and then
      Generate
      :
      Security Level
      :
      Advanced
      Roles
      :
      Viewer
      Views
      :
      Endpoint Administration
  2. Copy the API key and note its key ID.
    1. Copy
      the API key and then click
      Done
      .
    2. In the API Keys table, note the number in the
      ID
      column for the key you just generated.
    3. Open a text editor, paste the key string you just copied, and type the key ID you just noted.
  3. Copy the URL of the XDR server.
    1. Return to
      Settings
      Configurations
      Integrations
      API Keys
      in Cortex XDR, right-click your API key, and then
      View Examples
      .
    2. Copy the
      CURL Example
      URL.
      This contains your unique FQDN:
      https://api-<fqdn>
    3. Paste the URL below the API key string and key ID in your text editor.

Recommended For You