Log Sources

REST API operations for log sources

Overview

The /log-sources REST API operations are in open beta starting with Panther version 1.111, and are available to all customers. Please share any bug reports and feature requests with your Panther support team.

Use these API operations to interact with log sources in Panther. Currently, interactions with HTTP Sources are supported. (This does not include supported log sources that use HTTP as their transport mechanism.)

To call the API, see the How to use the Panther REST API instructions—including directions for how to invoke it directly from this documentation page.

Required permissions

• For GET operations, your API token must have the View Log Sources permission.

• For POST, PUT, and DELETE operations, your API token must have the Manage Log Sources permission.

Operations

create http source

post

Authorizations

Body

authBearerTokenstringoptional

The authentication bearer token value of the http source. Used for Bearer auth method

authHeaderKeystringoptional

The authentication header key of the http source. Used for HMAC and SharedSecret auth methods

authHmacAlgstringoptional

The authentication algorithm of the http source. Used for HMAC auth method

authMethodstring · enumrequired

The authentication method of the http source

Available options:

authPasswordstringoptional

The authentication header password of the http source. Used for Basic auth method

authSecretValuestringoptional

The authentication header secret value of the http source. Used for HMAC and SharedSecret auth methods

authUsernamestringoptional

The authentication header username of the http source. Used for Basic auth method

integrationLabelstringrequired

The integration label (name)

logStreamTypestring · enumrequired

The log stream type

Available options:

logTypesstring[]required

The log types of the integration

Responses

application/json

application/json

application/json

application/json

cURL

JavaScript

Python

HTTP

cURL

curl -L \
  --request POST \
  --url 'https://your-api-host/log-sources/http' \
  --header 'X-API-Key: YOUR_API_KEY' \
  --header 'Content-Type: application/json' \
  --data '{
    "authBearerToken": "text",
    "authHeaderKey": "text",
    "authHmacAlg": "text",
    "authMethod": "SharedSecret",
    "authPassword": "text",
    "authSecretValue": "text",
    "authUsername": "text",
    "integrationLabel": "text",
    "logStreamType": "Auto",
    "logTypes": [
      "text"
    ]
  }'

201

400

409

500

201

{
  "authBearerToken": "text",
  "authHeaderKey": "text",
  "authHmacAlg": "text",
  "authMethod": "SharedSecret",
  "authPassword": "text",
  "authSecretValue": "text",
  "authUsername": "text",
  "integrationId": "text",
  "integrationLabel": "text",
  "logStreamType": "Auto",
  "logTypes": [
    "text"
  ]
}

Created response.

get http source

get

Authorizations

Path parameters

idstringrequired

ID of the http source to fetch

Responses

application/json

application/json

application/json

application/json

cURL

JavaScript

Python

HTTP

cURL

curl -L \
  --url 'https://your-api-host/log-sources/http/{id}' \
  --header 'X-API-Key: YOUR_API_KEY'

200

400

404

500

200

{
  "authBearerToken": "text",
  "authHeaderKey": "text",
  "authHmacAlg": "text",
  "authMethod": "SharedSecret",
  "authPassword": "text",
  "authSecretValue": "text",
  "authUsername": "text",
  "integrationId": "text",
  "integrationLabel": "text",
  "logStreamType": "Auto",
  "logTypes": [
    "text"
  ]
}

OK response.

put http source

put

put updates an http source

Authorizations

Path parameters

idstringrequired

ID of the http source to update

Body

authBearerTokenstringoptional

The authentication bearer token value of the http source. Used for Bearer auth method

authHeaderKeystringoptional

The authentication header key of the http source. Used for HMAC and SharedSecret auth methods

authHmacAlgstringoptional

The authentication algorithm of the http source. Used for HMAC auth method

authMethodstring · enumrequired

The authentication method of the http source

Available options:

authPasswordstringoptional

The authentication header password of the http source. Used for Basic auth method

authSecretValuestringoptional

The authentication header secret value of the http source. Used for HMAC and SharedSecret auth methods

authUsernamestringoptional

The authentication header username of the http source. Used for Basic auth method

integrationLabelstringrequired

The integration label (name)

logStreamTypestring · enumrequired

The log stream type

Available options:

logTypesstring[]required

The log types of the integration

Responses

application/json

application/json

application/json

application/json

application/json

cURL

JavaScript

Python

HTTP

cURL

curl -L \
  --request PUT \
  --url 'https://your-api-host/log-sources/http/{id}' \
  --header 'X-API-Key: YOUR_API_KEY' \
  --header 'Content-Type: application/json' \
  --data '{
    "authBearerToken": "text",
    "authHeaderKey": "text",
    "authHmacAlg": "text",
    "authMethod": "SharedSecret",
    "authPassword": "text",
    "authSecretValue": "text",
    "authUsername": "text",
    "integrationLabel": "text",
    "logStreamType": "Auto",
    "logTypes": [
      "text"
    ]
  }'

200

400

404

409

500

200

{
  "authBearerToken": "text",
  "authHeaderKey": "text",
  "authHmacAlg": "text",
  "authMethod": "SharedSecret",
  "authPassword": "text",
  "authSecretValue": "text",
  "authUsername": "text",
  "integrationId": "text",
  "integrationLabel": "text",
  "logStreamType": "Auto",
  "logTypes": [
    "text"
  ]
}

OK response.

delete http source

delete

Authorizations

Path parameters

idstringrequired

ID of the http source to delete

Responses

application/json

application/json

cURL

JavaScript

Python

HTTP

cURL

curl -L \
  --request DELETE \
  --url 'https://your-api-host/log-sources/http/{id}' \
  --header 'X-API-Key: YOUR_API_KEY'

204

400

500

204

No body

No Content response.