Skip to main content

Hello,

I need to send alerts from one chronicle siem to another.

How can I do this?

Thank you

You can use our Detections API and Search APIs to pull data from SecOps SIEM and then you can use our Ingestion API to push the data to another SecOps SIEM.


Detections API: https://cloud.google.com/chronicle/docs/reference/detection-engine-api


Search API: https://cloud.google.com/chronicle/docs/reference/search-api#listalerts


Rules API: https://cloud.google.com/chronicle/docs/reference/ingestion-api


You can use our Detections API and Search APIs to pull data from SecOps SIEM and then you can use our Ingestion API to push the data to another SecOps SIEM.


Detections API: https://cloud.google.com/chronicle/docs/reference/detection-engine-api


Search API: https://cloud.google.com/chronicle/docs/reference/search-api#listalerts


Rules API: https://cloud.google.com/chronicle/docs/reference/ingestion-api


Hi @Rene_Figueroa , the listalert api endpoint will be soon deprecated, is there already an alternative for that ?


Reply