Proofpoint | ObserveIT On-Premises Insider Threat Management
Integration using ObserveIT RESTful API
Integration using ObserveIT RESTful API
You can use the ObserveIT RESTful API to leverage your ObserveIT data and integrate with other systems, including log aggregation tools and SIEMs. The Splunk and QRadar integration apps are built using this method.
To integrate ObservetIT using APIs, use the ObserveIT Developer Portal. See ObserveIT API Portal.
The ObserveIT API is the preferred method for building integrations. You can get a feed of the latest activities and alerts in ObserveIT as well as collect user activity profiles and update alert rule lists.