Skip to main content

How to send a chronicle siem alert to other chronicle siem?

  • May 29, 2024
  • 2 replies
  • 17 views

Roni11

Hello,

I need to send alerts from one chronicle siem to another.

How can I do this?

Thank you

2 replies

Rene_Figueroa
Staff
Forum|alt.badge.img+10

You can use our Detections API and Search APIs to pull data from SecOps SIEM and then you can use our Ingestion API to push the data to another SecOps SIEM.

Detections API: https://cloud.google.com/chronicle/docs/reference/detection-engine-api

Search API: https://cloud.google.com/chronicle/docs/reference/search-api#listalerts

Rules API: https://cloud.google.com/chronicle/docs/reference/ingestion-api


Forum|alt.badge.img+6
  • Bronze 5
  • September 3, 2024

You can use our Detections API and Search APIs to pull data from SecOps SIEM and then you can use our Ingestion API to push the data to another SecOps SIEM.

Detections API: https://cloud.google.com/chronicle/docs/reference/detection-engine-api

Search API: https://cloud.google.com/chronicle/docs/reference/search-api#listalerts

Rules API: https://cloud.google.com/chronicle/docs/reference/ingestion-api


Hi @Rene_Figueroa , the listalert api endpoint will be soon deprecated, is there already an alternative for that ?