Introduction

You can configure event log integrations with your observability tool of choice via our custom webhook option. You can select the events you would like to receive and create multiple integration configurations to support different reporting and monitoring needs. 

Integrating Custom Webhooks

1. Open the Beyond Identity Admin console and select Integrations from the left menu.
2. From the Integrations page, click the SIEM tab.
3. Click Add SIEM Integration and scroll down to select the “Custom Webhook.”
   
4. Click Save Changes. 
5. Complete the following information on the Edit Generic Webhook Integration dialog.
   
   
   1. Enter a name for your integration.
   2. Once you’ve configured a destination for these events, please enter the URL destination provided by your observability vendor.
   3. Select an authentication method: 
      • No Auth - Requires no additional credentials
      • Basic - Provide a username and password
      • Bearer - Provide a bearer token
   4. Under Events, choose Select all or select individual events to include in the integration. Check the box underneath to receive all new events going forward.
   5. Under Threat Signals, choose Select all to include all threat events. Check the box underneath to receive all new threat events going forward.
   6. Test your configuration before saving it by clicking Test Configuration.
   7. Click Save Changes.