Overview

Rapid7 InsightIDR is a cloud based SIEM that will allow you to quickly detect and respond to threats across your network.

Available Integrations

Product(s)	Supported Asset Type(s)	Integration Type
Rapid7 InsightIDR	Devices	Source

Why You Should Integrate

Integrating with Rapid7 InsightIDR will provide a deeper insight into your devices and allow you to quickly recognize security threats.

How Does the Integration Work

This integration pulls all assets found in the Rapid7 InsightIDR platform.

This data is only used internally; we do not share it with any parties outside of Sevco. Refer to our privacy policy for details.

⚠️
Please review the configuration instructions in the section below before setting up permissions for apps.

Configuration

Configure the Access Schema

Field	Description	Example
`API Key`*	The API key generated in the Rapid7 console	`***********************`

Add an Integration: Select the integration(s) you'd like to add.
- Collect devices
Configuration Options

Field	Description	Example
`Region`	The Region for your Rapid7 server	`us`

Configure General Information: OPTIONAL: You can use the following fields to provide additional information about your configuration.

Field	Description	Example
`Name (optional)`	Uniquely identifiable attribute of the configuration to delineate other similar configurations with the existing organization.	`DMZ network`
`Contact Person (optional)`	A placeholder to input a name or email address of a contact associated with the integration.	`Jane Doe`
`Link to Console (optional)`	A placeholder to input a link to the console of the product Sevco is integrating with for quick reference and access when configuring or editing the integration.	`www.product.com/devices`
`Email me about frequent errors`	Select this toggle to receive an email whenever an Integration has a ≥30% error rate in a 24-hour period.	n/a

Activate Config: Select "Activate" to enable this configuration and begin pulling data.

External Documentation

Creating credentials

You will be asked to provide credentials that Sevco will use for the integrations. The following link will step you through creating an API Key to configure the Access Schema, Managing Platform API Keys

Required Permissions

The following permissions are required:

The associated account will need to be in an InsightIDR Viewer role at a minimum. For more information, please see how to Manage Insight Platform users with role-based access control (RBAC).

Contact Us

If you're having problems configuring an Integration, or if you've found something wrong in this document, please email us at [email protected] or suggest edits directly by selecting the Suggest Edits link located in the upper right hand corner of the documentation.