Skip to main content

Spikerz SIEM integration with Rapid7

R
Written by Ron Azogui
Updated today

Create a Rapid7 account and navigate to the dashboard. Click on the settings gear in top right bar.

Click the API Key management and create a new API key.

Go back to the dashboard. From the left sidebar menu choose SIEM menu entry.

Navigate to the Data collection section.

Choose the Event source tab. And click “Add Event Source” button

From the event's source filters choose Webhook. And click the button “Run Auto Configure”

Choose Webhook from the open dialog window and fill in the preferred source name. Copy the Webhook URL.

Navigate to your Spikerz profile and tap on the "Settings" button.

Go to the Settings section and tap on "Workspace". In this screen tap on the "Connect SIEM" button.

In the URL field fill in the Rapid7 event source Webhook URL and in the token field the created API key.

Did this answer your question?