Cortex XDR and XSIAM Postman API Collection

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
L4 Transporter
No ratings

nhussaini_6-1634869207188.jpeg

 

What is Postman? 

Postman is the collaboration platform for API development. Postman simplifies each step of building an API and streamlines collaboration so you can create better APIs faster, you can download the postman community edition now.

 

Why use Postman? 

Postman is an API client that makes it easy for developers to create, share, test and document APIs. This is done by allowing users to create and save simple and complex HTTP/s requests and read their responses. The result - More efficient and less tedious work.

 

How do I use the Cortex XDR and XSIAM Postman API Collection?

  • Download the zip file attached at the bottom of this post
  • Import the postman collection pack 

 

nhussaini_0-1635298937948.png

 

nhussaini_1-1635298937853.png

 

nhussaini_2-1635298937949.png
 
Set your environment configuration:
 

 

nhussaini_3-1635298938104.png

 

nhussaini_4-1635298938048.png

 

Make sure to add your API Key variables: 
authid = ID
authorizationkey = API Key
URL =  tenant url 

 

If you don't have ID, URL, and API Key please follow the requests here.

 

nhussaini_5-1635298938024.png

 

 
Load your environment: 

 

 

nhussaini_6-1635298937965.png
 
Run a simple test:

 

nhussaini_7-1635298938120.png

 

Postman collection organization

Each Example folder is related to the API endpoints documentation, essentially it's a translation of all current curl examples in XDR documentation to the postman. The additional folder "Use Cases" are functional examples or easy to test requests (that may require small changes depending on your use scenario and environment). 

 

 

nhussaini_8-1635298937955.png

 

API Documentation

For each example API call, you can check the reference to our official documentation:

 

nhussaini_9-1635298937903.png

 

Also, you can access all references going to the documentation summary:

 

nhussaini_10-1635298938056.png

 


 

Palo Alto Networks Contributor:

Tiago VilasCortex Customer Success Architect 

 

Rate this article:
(1)
Comments
L0 Member

It should be noted that the value you enter in the URL variable should include the api- prefix. The API docs said: https://api-{fqdn}/public_api/v1/{name of api}/{name of call}/

where fqdn = tenant url

Otherwise it will return a login web page instead

  • 9310 Views
  • 1 comments
  • 6 Likes
Register or Sign-in
Article Dashboard
Version history
Last Updated:
‎11-19-2024 03:23 PM
Updated by: