Skip to main content
Updates a SIEM streaming destination. You can change the endpoint URL, rotate credentials, or toggle streaming on and off. Only the fields you include in the request body are updated.

Parameters

string
required
The SIEM destination ID (e.g., siem_abc123).
string
New HTTPS endpoint URL.
string
New authentication token (Splunk, Datadog, Elastic).
string
New AWS access key ID (CloudWatch).
string
New AWS secret access key (CloudWatch).
string
New shared secret (custom webhook).
boolean
Enable or disable streaming.

Responses