CrowdStrike Falcon Next-Gen SIEM

Integrating Keeper SIEM push to Crowdstrike Falcon Next-Gen SIEM

Overview

Keeper supports event streaming into CrowdStrike Next-Gen SIEM. External logging is real-time, and new events will appear almost immediately. Setup instructions are below.

1

Add the Data Connector

  • From the CrowdStrike dashboard, visit the Data onboarding > Data Connectors screen.

  • Select "+ Add connection" and search for Keeper

  • Click "Configure", assign a name, and then "Create connection".

Data connectors
2

Create the API Key

  • From the Data Connector screen, in the Keeper row click the overflow menu and then "Generate API Key".

  • Save the API Key and API URL for the next step.

Create API Key
Copy the API Key and API URL
3

Activate the Integration

  • From the Keeper Admin Console, go to Reporting & Alerts > External Logging

  • Select CrowdStrike Falcon Next-Gen SIEM

  • Provide the API Key and API URL from Step 2.

  • Click Test and then Save.

Setup Complete!

When SIEM logs are sent from Keeper to CrowdStrike, the data will begin to populate in the "Third Party" source within a few minutes.

Event Logs in Crowdstrike

Last updated

Was this helpful?