Setup SIEM with Rapid7 insightIDR

Setup SIEM with Rapid7 logging. 

Rapid7 Setup:

1. Log in to Rapid7.
2. Go to Data Collection > Setup Event Source > Add Event Source.
3. Select Add Custom Logs and choose Webhook.
4. Copy the generated Webhook URL.
5. Click Save.

SIEM-Rapid7-1_en-us.png

 

Splashtop Setup:

1. Log in to the Splashtop web portal.
2. Go to Management > SIEM - Create/Edit SIEM.
3. Paste the Webhook URL (omit "https://") into the URL field.
4. Click Create / Update.

 

SIEM-Rapid7-2_en-us.png

3. Check Raw Data in the Rapid7 logs

 

 

 

 

0 out of 0 found this helpful