Create an API Key
Before setting up this integration to Logsign USO, you will need to create a SentinelOne API key in your SentinelOne Cloud console.
To create an API key for SentinelOne, follow the steps below:
Log in to your SentinelOne Cloud console, then click Settings.
Select the Users tab.
Select Service Users.
Click Actions, then select Create New Service User.
In the Create New Service User pop-up window that opens, enter a Name and Description, then select an Expiration Date.
Click Next.
Select Account, then select Viewer for your account.
Click Create User.In the pop-up window that opens, click Copy API Token to copy the API key to your keyboard, or click Download API Token to download a copy of the API key.
Locate the API Domain
Before you set up the integration in your Logsign USO, you will also need to locate your API domain. This domain is displayed in the URL of your SentinelOne Cloud console.
For example, in the image below, the API domain is “usea1-partners.sentinelone.net”.
Then you need to log in to Logsign USO, click Settings > Data Collection > API tabs, select SentinelOne product and fill in the fields below.
Then, when you Check Connection, you will see a field where you can type the source name and other information. You can click the Save button and start receiving logs.