CrowdStrike

Overview

CrowdStrike events provide critical security insights related to your endpoints. Read these events to centralize your security insights in Coralogix and investigate potential threats with the relevant context.

For more information about this integration, click here.

How to use with Terraform

To deploy this integration using Terraform, you can use the coralogix_integration resource provided by the Coralogix Terraform provider. Below is an example configuration:

resource "coralogix_integration" "crowd-strike-collector" {
  integration_key = "crowd-strike-collector"
  version         = "0.0.1"

  parameters = {
    IntegrationName = "CrowdStrike"
    ApplicationName = "<ApplicationName>"
    SubsystemName = "CrowdStrike"
    ClientId = "<ClientId>"
    ClientSecret = "<ClientSecret>"
  }
}

Replace the placeholder values with your actual configuration parameters. Refer to the parameter table below for required fields and their descriptions.

Revisions

0.0.1

Name	Type	Required	Description
ApplicationName	String	Yes	The application name that the integration will be used with
ClientId	String	Yes	API client ID used to authenticate and read events from your CrowdStrike account
ClientSecret	String	Yes	API client secret used to authenticate and read events from your CrowdStrike account
IntegrationName	String	Yes
SubsystemName	String	Yes	The subsystem name that the integration will be used with
CloudName	String	No	Select the cloud where your CrowdStrike account is defined
EventTypes	Boolean	No	The list of CrowdStrike event types to read

Azure Metrics

Next GCP Logs