Skip to content

SentinelOne

Overview

SentinelOne logs provide critical insights into the security of your organization, including endpoint activities, detected threats, user and admin actions. Read these logs to identify patterns, investigate threats and abnormal actions, and understand the context of potential security breaches.

For more information about this integration, click here.

How to use with Terraform

To deploy this integration using Terraform, you can use the coralogix_integration resource provided by the Coralogix Terraform provider. Below is an example configuration:

resource "coralogix_integration" "sentinel-one-collector" {
  integration_key = "sentinel-one-collector"
  version         = "0.0.1"

  parameters = {
    IntegrationName = "<IntegrationName>"
    ApplicationName = "<ApplicationName>"
    SubsystemName = "SentinelOne"
    Endpoint = "<Endpoint>"
    ApiKey = "<ApiKey>"
  }
}

Replace the placeholder values with your actual configuration parameters. Refer to the parameter table below for required fields and their descriptions.

Revisions

0.0.1
NameTypeRequiredDescription
ApiKeyStringYesAPI token to authenticate and read logs from your SentinelOne tenant
ApplicationNameStringYesThe application name that the integration will be used with
EndpointStringYesURL of your SentinelOne tenant to connect and read logs from
IntegrationNameStringYes
SubsystemNameStringYesThe subsystem name that the integration will be used with