DKBSignDocs

API reference

POSTRequires Bearer token

Create a SIEM connector

/api/logs-audit/siem/connectors

Submit /api/logs-audit/siem/connectors. Authenticated routes need Authorization: Bearer {token} from POST /api/v1/login.

Path parameters

This endpoint has no path parameters.

Query parameters

This endpoint has no query parameters.

Request body

FieldTypeDescription
name
Required
stringConnector name.
e.g. "Splunk prod"
vendor
Required
stringsplunk, sentinel, qradar, elastic, or custom.
e.g. "splunk"
enabled
booleanForward events.
e.g. true
endpoint
Required
stringHTTPS endpoint.
e.g. "https://siem.acme.test/events"
format
stringcef, leef, or json.
e.g. "json"
token
stringConnector token (write-only).

Responses

StatusMeaning
201Connector created
401Missing or invalid Bearer token.

Request

curl
curl -X POST 'https://api.dkbsigns.com/api/logs-audit/siem/connectors' \
  -H 'Authorization: Bearer $DKBSIGN_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{"name":"Splunk prod","vendor":"splunk","endpoint":"https://siem.acme.test/events","enabled":true,"format":"json"}'

Response 201

json
{
  "id": "c1",
  "name": "Splunk prod",
  "vendor": "splunk",
  "enabled": true
}