SIEM HTTP Destinations

A SIEM HTTP Destination defines where Files.com sends the log types you select. For HTTP destinations, Files.com sends JSON to the configured endpoint. For file destinations, Files.com writes JSON or CSV files to the configured folder.

List SIEM HTTP Destinations

SDK Method

siemhttpdestination.List()

Return Object

[]*SiemHttpDestination

Authorization Requirement

Requires a Site-Wide API key, or a User API key or session from a Site Administrator.

Additional Arguments

Example Request

import (
    "fmt"
    "errors"

    files_sdk "github.com/Files-com/files-sdk-go/v3"
    siem_http_destination "github.com/Files-com/files-sdk-go/v3/siemhttpdestination"
)

siemHttpDestinationIterator, err := siem_http_destination.List(files_sdk.SiemHttpDestinationListParams{})
if err != nil {
    var respErr files_sdk.ResponseError
    if errors.As(err, &respErr) {
        fmt.Println("Response Error Occurred (" + respErr.Type + "): " + respErr.ErrorMessage)
    } else {
        fmt.Printf("Unexpected Error: %s\n", err.Error())
    }
}

for siemHttpDestinationIterator.Next() {
    siemHttpDestination := siemHttpDestinationIterator.siemHttpDestination()
}
err = siemHttpDestinationIterator.Err()
if err != nil {
    var respErr files_sdk.ResponseError
    if errors.As(err, &respErr) {
        fmt.Println("Response Error Occurred (" + respErr.Type + "): " + respErr.ErrorMessage)
    } else {
        fmt.Printf("Unexpected Error: %s\n", err.Error())
    }
}

Show SIEM HTTP Destination

SDK Method

siemhttpdestination.Find()

Return Object

SiemHttpDestination

Authorization Requirement

Requires a Site-Wide API key, or a User API key or session from a Site Administrator.

SiemHttpDestinationFindParams Fields

Field	Description
Id int64 Required	Siem Http Destination ID.

Example Request

import (
    "fmt"
    "errors"

    files_sdk "github.com/Files-com/files-sdk-go/v3"
    siem_http_destination "github.com/Files-com/files-sdk-go/v3/siemhttpdestination"
)

siemHttpDestination, err := siem_http_destination.Find(files_sdk.SiemHttpDestinationFindParams{Id: 1})
if err != nil {
    var respErr files_sdk.ResponseError
    if errors.As(err, &respErr) {
        fmt.Println("Response Error Occurred (" + respErr.Type + "): " + respErr.ErrorMessage)
    } else {
        fmt.Printf("Unexpected Error: %s\n", err.Error())
    }
}

Create SIEM HTTP Destination

SDK Method

siemhttpdestination.Create()

Return Object

SiemHttpDestination

Authorization Requirement

Requires a Site-Wide API key, or a User API key or session from a Site Administrator.

SiemHttpDestinationCreateParams Fields

Field	Default	Description
Name string		Name for this Destination
AdditionalHeaders object		Additional HTTP Headers included in calls to the destination URL
SendingActive boolean	`true`	Whether this SIEM HTTP Destination is currently being sent to or not
GenericPayloadType string		Applicable only for destination type: generic. Indicates the type of HTTP body. Can be json_newline or json_array. json_newline is multiple log entries as JSON separated by newlines. json_array is a single JSON array containing multiple log entries as JSON. Possible values: `json_newline`, `json_array`
FileDestinationPath string		Applicable only for destination type: file. Destination folder path on Files.com.
FileFormat string		Applicable only for destination type: file. Generated file format. Possible values: `json`, `csv`
FileIntervalMinutes int64		Applicable only for destination type: file. Interval, in minutes, between file deliveries. Valid values are 5, 10, 15, 20, 30, 60, 90, 180, 240, 360.
SplunkToken string		Applicable only for destination types: splunk, splunk_compatible. Authentication token for the destination.
CrowdstrikeToken string		Applicable only for destination type: crowdstrike. Authentication token provided by Crowdstrike.
AzureDcrImmutableId string		Applicable only for destination types: azure, azure_legacy. Immutable ID of the Data Collection Rule.
AzureStreamName string		Applicable only for destination type: azure. Name of the stream in the DCR that represents the destination table.
AzureOauthClientCredentialsTenantId string		Applicable only for destination types: azure, azure_legacy. Client Credentials OAuth Tenant ID.
AzureOauthClientCredentialsClientId string		Applicable only for destination types: azure, azure_legacy. Client Credentials OAuth Client ID.
AzureOauthClientCredentialsClientSecret string		Applicable only for destination type: azure. Client Credentials OAuth Client Secret.
QradarUsername string		Applicable only for destination type: qradar. Basic auth username provided by QRadar.
QradarPassword string		Applicable only for destination type: qradar. Basic auth password provided by QRadar.
SolarWindsToken string		Applicable only for destination type: solar_winds. Authentication token provided by Solar Winds.
NewRelicApiKey string		Applicable only for destination type: new_relic. API key provided by New Relic.
DatadogApiKey string		Applicable only for destination type: datadog. API key provided by Datadog.
ActionSendEnabled boolean	`false`	Whether or not sending is enabled for action logs.
SftpActionSendEnabled boolean	`false`	Whether or not sending is enabled for sftp_action logs.
FtpActionSendEnabled boolean	`false`	Whether or not sending is enabled for ftp_action logs.
WebDavActionSendEnabled boolean	`false`	Whether or not sending is enabled for web_dav_action logs.
SyncSendEnabled boolean	`false`	Whether or not sending is enabled for sync logs.
OutboundConnectionSendEnabled boolean	`false`	Whether or not sending is enabled for outbound_connection logs.
AutomationSendEnabled boolean	`false`	Whether or not sending is enabled for automation logs.
ApiRequestSendEnabled boolean	`false`	Whether or not sending is enabled for api_request logs.
PublicHostingRequestSendEnabled boolean	`false`	Whether or not sending is enabled for public_hosting_request logs.
EmailSendEnabled boolean	`false`	Whether or not sending is enabled for email logs.
ExavaultApiRequestSendEnabled boolean	`false`	Whether or not sending is enabled for exavault_api_request logs.
SettingsChangeSendEnabled boolean	`false`	Whether or not sending is enabled for settings_change logs.
DestinationType string Required		Destination Type Possible values: `generic`, `splunk`, `azure_legacy`, `qradar`, `sumo`, `rapid7`, `solar_winds`, `new_relic`, `datadog`, `azure`, `file`, `crowdstrike`, `splunk_compatible`
DestinationUrl string		Destination Url

Example Request

import (
    "fmt"
    "errors"

    files_sdk "github.com/Files-com/files-sdk-go/v3"
    siem_http_destination "github.com/Files-com/files-sdk-go/v3/siemhttpdestination"
)

siemHttpDestination, err := siem_http_destination.Create(files_sdk.SiemHttpDestinationCreateParams{DestinationType: "example"})
if err != nil {
    var respErr files_sdk.ResponseError
    if errors.As(err, &respErr) {
        fmt.Println("Response Error Occurred (" + respErr.Type + "): " + respErr.ErrorMessage)
    } else {
        fmt.Printf("Unexpected Error: %s\n", err.Error())
    }
}

send_test_entry SIEM HTTP Destination

SDK Method

siemhttpdestination.SendTestEntry()

Return Object

No return value.

Authorization Requirement

Requires a Site-Wide API key, or a User API key or session from a Site Administrator.