Integrate RevealX 360 with LevelBlue

Integrate ExtraHop RevealX 360 with LevelBlue, a managed detection and response (MDR) tool, to investigate and respond to device and detection data. By creating ExtraHop REST API credentials, you can export RevealX device and detection data to LevelBlue through ExtraHop REST API operations.

Before you begin

You must meet the following ExtraHop RevealX 360 requirements:

  • Your user account must have privileges on RevealX 360 for System and Access Administration.
  • Your RevealX 360 system must be connected to an ExtraHop sensor with firmware version 9.8 or later.
  • Your RevealX 360 system must be connected to ExtraHop Cloud Services.
  1. Complete the following steps to create ExtraHop REST API credentials for the integration:
    1. Log in to RevealX 360.
    2. Click the System Settings icon and then click Integrations.
    3. Click the tile of the integration you want to configure.
    4. Click Create Credential.
      The page displays the generated ID and secret.
    5. (Optional): If you have already created a credential for REST API access, you can apply it to the integration. Click Select Existing Credential, select a credential from the drop-down list and then click Select.
    6. Copy and store the ID and secret, which you will need to configure the ExtraHop app.
    7. Click Done.
      The credential is added to the ExtraHop REST API Credentials page where you can view the credential status, copy the ID, or delete the credential.
  2. Export RevealX device and detection data to your LevelBlue MDR through the ExtraHop REST API.
Last modified 2024-10-12