Update SIEM destination
curl --request PUT \
--url https://api.truthlocks.com/v1/audit/siem/{id} \
--header 'Content-Type: application/json' \
--header 'X-API-Key: <api-key>' \
--data '
{
"endpoint": "<string>",
"token": "<string>",
"access_key_id": "<string>",
"secret_access_key": "<string>",
"secret": "<string>",
"enabled": true
}
'const options = {
method: 'PUT',
headers: {'X-API-Key': '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
endpoint: '<string>',
token: '<string>',
access_key_id: '<string>',
secret_access_key: '<string>',
secret: '<string>',
enabled: true
})
};
fetch('https://api.truthlocks.com/v1/audit/siem/{id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.truthlocks.com/v1/audit/siem/{id}"
payload = {
"endpoint": "<string>",
"token": "<string>",
"access_key_id": "<string>",
"secret_access_key": "<string>",
"secret": "<string>",
"enabled": True
}
headers = {
"X-API-Key": "<api-key>",
"Content-Type": "application/json"
}
response = requests.put(url, json=payload, headers=headers)
print(response.text)package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.truthlocks.com/v1/audit/siem/{id}"
payload := strings.NewReader("{\n \"endpoint\": \"<string>\",\n \"token\": \"<string>\",\n \"access_key_id\": \"<string>\",\n \"secret_access_key\": \"<string>\",\n \"secret\": \"<string>\",\n \"enabled\": true\n}")
req, _ := http.NewRequest("PUT", url, payload)
req.Header.Add("X-API-Key", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}{
"id": "<string>",
"provider": "<string>",
"endpoint": "<string>",
"enabled": true,
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z",
"status": "<string>"
}Audit & Logs
Update SIEM destination
Update the endpoint, credentials, or enabled state of an existing SIEM destination.
PUT
/
v1
/
audit
/
siem
/
{id}
Update SIEM destination
curl --request PUT \
--url https://api.truthlocks.com/v1/audit/siem/{id} \
--header 'Content-Type: application/json' \
--header 'X-API-Key: <api-key>' \
--data '
{
"endpoint": "<string>",
"token": "<string>",
"access_key_id": "<string>",
"secret_access_key": "<string>",
"secret": "<string>",
"enabled": true
}
'const options = {
method: 'PUT',
headers: {'X-API-Key': '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
endpoint: '<string>',
token: '<string>',
access_key_id: '<string>',
secret_access_key: '<string>',
secret: '<string>',
enabled: true
})
};
fetch('https://api.truthlocks.com/v1/audit/siem/{id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.truthlocks.com/v1/audit/siem/{id}"
payload = {
"endpoint": "<string>",
"token": "<string>",
"access_key_id": "<string>",
"secret_access_key": "<string>",
"secret": "<string>",
"enabled": True
}
headers = {
"X-API-Key": "<api-key>",
"Content-Type": "application/json"
}
response = requests.put(url, json=payload, headers=headers)
print(response.text)package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.truthlocks.com/v1/audit/siem/{id}"
payload := strings.NewReader("{\n \"endpoint\": \"<string>\",\n \"token\": \"<string>\",\n \"access_key_id\": \"<string>\",\n \"secret_access_key\": \"<string>\",\n \"secret\": \"<string>\",\n \"enabled\": true\n}")
req, _ := http.NewRequest("PUT", url, payload)
req.Header.Add("X-API-Key", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}{
"id": "<string>",
"provider": "<string>",
"endpoint": "<string>",
"enabled": true,
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z",
"status": "<string>"
}The public audit SIEM destination CRUD routes are not registered in the current backend. This contract describes an unfinished integration and requests may return 404. Do not submit SIEM credentials or rely on this page to configure streaming. Risk-event export is a separate capability, documented under the risk SIEM export reference.
Responses
Authorizations
API key for machine-to-machine authentication
Path Parameters
SIEM destination ID.
Body
application/json
New HTTPS endpoint URL.
New authentication token (Splunk, Datadog, Elastic).
New AWS access key ID (CloudWatch).
New AWS secret access key (CloudWatch).
New shared secret (webhook).
Enable or disable streaming.

