This article leads you through the process of integrating ExtraHop Reveal(x) 360 with Red Canary. Follow the procedure from beginning to end. 

Step 1: ExtraHop Reveal(x) 360–Create REST API credentials

Red Canary uses your representational state transfer (REST) API credentials to make REST calls to your cloud instance in order to start receiving your alerts.

1. From your ExtraHop dashboard, click system settings.
2. From the Administration section, click API Access.
3. Click Create Credentials.
   
   
4. Name your REST API Credential.
5. From the Privileges section, select Full read-only.
6. From the Packet Access section, select No Access.
7. From the Detections Access section, select All detections.
   
   
8. Click Save.
9. Copy and save the API Endpoint, ID and Secret for your REST API Credentials.
   
   

Step 2: Red Canary–Connect ExtraHop Reveal(x) 360 API REST credentials to Red Canary

Connect your ExtraHop API REST credentials to Red Canary to start sending your alerts.

1. From the Red Canary homepage, click Integrations, and then click Alert Sources.
2. In the search bar, type and select ExtraHop Reveal(x) 360.
   
   
3. To configure your new alert source, scroll down and click ExtraHop Reveal(x) 360.
4. Click Edit Configuration.
5. Enter a Name for your external alert source.  
6. Select a Display Category.
7. Under the Ingest Format/Method dropdown, select ExtraHop via API Poll.
8. Enter your ExtraHop Client ID from Step 1.10.
9. Enter your ExtraHop Client Secret from Step 1.10.
10. Enter your ExtraHop API Host from Step 1.10.
    
    
11. Click Save Configuration.
12. Click Edit Configuration.
13. Click Activate.