ESET Connect API Source¶
ESET Connect is an API gateway between a client and a collection of ESET backend services. It acts as a reverse proxy to accept all application programming interface (API) calls, aggregate the various services required to fulfill them and return the appropriate result.
Creating new API Client¶
Warning
In order to create new user, you need to have superuser permission in ESET Business Account.
- Log as superuser (Administrator) into ESET Business Account.
-
Open User Management and click on New user button at the bottom.
-
Create the account with read-only permission and enable Integrations slider bar.
-
New user account should be successfully created with permission to read from ESET Connect API.
Collecting detections from connected devices¶
Connected devices are organized in device groups. Each group can have its subgroups. One device can be a member of different subgroups. It is possible to monitor detections from from selected devices or selected device groups. If these are not specified, all devices are monitored.
Configuration of LogMan.io Collector¶
'input:ESET:EsetSource':
client_id: john.doe@domain.com # (required) E-mail of the API Client
client_secret: client_secret # (required) Password for the API Client
interval: 10 # (optional, default: 10) Interval between requests in seconds.