Installing Threat Intelligence¶

Uploading Threat Intelligence to the Fabric Storage¶

Private Location¶

You can upload Threat Intelligence (TI) to a private location in the Fabric Storage using the Upload - Upload API.

Endpoint URL:

https://api-server-host-name/configapi/Uploads/{pool_UUID}/

Method:

POST

Header:

FIELD	DESCRIPTION
file_name	Name of the Threat Intelligence .pak file
Content-Type	Mandatory value: `(application/octet-stream)`.

Parameters:

FIELD	TYPE	DESCRIPTION	Required
file	[Object]	The Threat Intelligence .pak file to upload.	Mandatory

Success Response:

{
    "status": "Success",
    "message": "Threat Intelligence.pak successfully uploaded in the private storage. "
}

Public Location¶

You can upload Threat Intelligence to a public location in the Fabric Storage using the Upload - UploadPublic files API.

Endpoint URL:

https://api-server-host-name/configapi/Uploads/PublicUpload

Method:

POST

Header:

FIELD	DESCRIPTION
file_name	Name of the Threat Intelligence .pak file
Content-Type	Mandatory value: `(application/octet-stream)`.

Parameters:

FIELD	TYPE	DESCRIPTION	Required
file	[Object]	The Threat Intelligence .pak file to upload.	Mandatory

Success Response:

{
    "status": "Success",
    "message": "Threat Intelligence.pak successfully uploaded in the public storage. "
}

Installing Threat Intelligence¶

You can install Threat Intelligence in Logpoint using the Upload - Install API. It must be uploaded to the Fabric Storage before the installation.

Endpoint URL:

https://api-server-host-name/configapi/Uploads/{pool_UUID}/{logpoint_identifier}/install

Method:

POST

Parameters:

FIELD	LABEL IN UI	TYPE	DESCRIPTION	Required
application_type		String	Mandatory value: `application`.	Mandatory
file_name	File	String	Name of the Threat Intelligence file.	Mandatory
file_location		String	Location of the Threat Intelligence file. Can be either `private` or `public`.	Mandatory

Request Example:

{
    "data": {
        "application_type": "Application",
        "file_name": "TI.pak",
        "file_location": "private"
    }
}

Success Response:

{
    "status": "Success",
    "message": "/monitorapi/{pool_UUID}/{logpoint_identifier}/orders/{request_id}"
}

Helpful?