Trend Micro Email Security Integration with Logsign Unified SecOps Platform (USO)
This documentation provides a step-by-step guide to integrating Trend Micro Email Security with Logsign Unified SecOps Platform (USO) via API. This integration enables Trend Micro Email Security to send logs to Logsign USO for monitoring and analysis.
1. Required Information
To complete this integration, you need the following details from Trend Micro Email Security:
- API Key: Required for authentication with the Trend Micro Email Security API.
- Username: Use the same username or email address you normally use to log in to the Trend Micro Email Security web interface.
- Regional Service URL: The API endpoint specific to your region. (e.g., ui.tmes.trendmicro.com, but the .com part may vary depending on your region.)
2. Obtain an API Key from Trend Micro Email Security
To generate an API Key for API access, follow these steps:
-
Log in to your Trend Micro Email Security admin account at
https://ui.tmes.trendmicro.com (Note: This URL may vary by region.)
- Navigate to Administration > Service Integration.
- The API Access tab will be open by default.
- Click Add to generate a new API Key.
- Copy the API Key and store it securely. This key will be used for authentication.
⚠️ Note: The API Key is sensitive information. Do not share it.
Regional Service URLs for Trend Micro Email Security
- North America, Latin America, and Asia Pacific: api.tmes.trendmicro.com
- Europe, the Middle East, and Africa: api.tmes.trendmicro.eu
- Australia and New Zealand: api.tmes-anz.trendmicro.com
- India: api.tmes-in.trendmicro.com
⚠️ Important: Using an incorrect Regional Service URL will result in API authentication and connection failures.
4. Configuring Integration in Logsign USO
1. Log in to Logsign USO Admin Panel
- Open your web browser and log in to the Logsign Unified SecOps Platform (USO) admin panel.
- Ensure that you are using an administrator account.
2. Navigate to Data Collection Settings
- Go to Settings > Data Collection > +Device.
- Click +Device to add a new device.
3. Define the Trend Micro Email Security API Integration
- API Selection: Choose Trend Micro - Email Security API as the API type.
- Service URL: Enter the Regional Service URL based on your location (e.g., api.tmes.trendmicro.com).
- Username: Provide your Trend Micro Email Security account username.
- API Key: Paste the API Key you generated earlier.
After specifying the device name and other information, you will start the log retrieval. This process may take a few minutes during the initial source addition.