API Alarm pulling

[adem_netsys]

Hi all,

I want to pull alarms from a SIEM product that does not have a connector, and we will do this with the API. Will there be a duplicate alarm here, how can we prevent it, has anyone written a playbook about this before?

[anerot-forti]

Hi,

not clear for me where could be the duplicate alarm.

If the FSR connector for your SIEM does not exist yet, you can simply use an API call as a step in a playbook to perform the relevant action.

Regards