Get started with Cortex XSIAM 3.x APIs

Cortex XSIAM Platform APIs

Before you can begin using Cortex XSIAM APIs, you must generate the following items in Cortex XSIAM:

Value Description
API Key The API Key is your unique identifier used as the Authorization:{key} header required for authenticating API calls. Depending on your desired security level, you can generate two types of API keys, Advanced or Standard, from Cortex XSIAM.
API Key ID The API Key ID is your unique token used to authenticate the API Key. The header used when running an API call is x-xdr-auth-id:{key_id}.
FQDN The FQDN is a unique host and domain name associated with each tenant.

Cortex XSIAM API URIs are made up of your tenant's FQDN, the API name, and endpoint path. For example, https://api-{fqdn}/xsiam/public/v1/{endpoint_path}/.

The following steps describe how to generate the necessary key values and run your first API call:

  1. Create a new API key.
  2. Get your Cortex XSIAM API key ID.
  3. Get your FQDN.
  4. Make your first API call.