Overview

FortiSIEM 6.7.5 and later API documentation is transitioning to https://fndn.fortinet.net/index.php?/fortiapi/2627-fortisiem/. Fortinet recommends checking this link first for the latest API updates.

FortiSIEM provides integrations that allows you to query and make changes to the CMDB, Dashboard, query events, and send incident notifications. Most of these integrations are via REST API.

This document provides integration specifications and example usage.

• CMDB Integration

• Dashboard Integration

• Event/Query Worker Configuration API

• Events and Report Integration
• External Help Desk/CMDB Integration
• External Threat Intelligence Integration
• Incident Integration
• Performance and Health API
• Rest API to Return Worker Queue State
• Watchlist Integration
• Example Usage
• Appendix
  • Description of Device Attributes
  • Description of Health JSON Attributes
  • Current Thresholds for Health Status