Integration of 1Password Cloud Log Source in LogRhythm SIEM

Options
amaster
amaster
Community Member
edited July 2023 in Business and Teams

We are looking to ingest logs from 1Password, which is a cloud-based password management solution already supported by other SIEM such as Splunk, Elastic, etc.

SIEM applications and services collect the information from 1Password through requests to the Events REST API. Requests are authenticated with a bearer token. Issue a token for each application or service you use.

https://support.1password.com/events-reporting/

What should be the steps that we need to take in order to get logs ingested in LogRhythm?

Can LogRhythm be working on it?

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser: Not Provided

Comments

  • ag_max
    ag_max
    Options

    Hi @amaster,

    Our Integrations team will be happy to look into this. To get in contact with them, please send an email to businesssupport@1password.com from your account's registered email address so we can continue the conversation there.

    After you have sent the email, feel free to post the ticket number you receive so we can locate your message and connect it with this forum discussion.

  • amaster
    amaster
    Community Member
    Options

    Hello @ag_max

    Thank you for your response. However just to let you know that we are MSSP and one of our clients want to onboard 1Password log source in LogRhythm SIEM. We don't have 1Password support account.

    As you mentioned to send an email to businesssupport@1password.com from your account's registered email address, will we get response from 1Password support or do we have to have a support account with you?

    Regards,

    Arpit Master

  • amaster
    amaster
    Community Member
    Options

    Thank you @ag_max

    Hey there! 👋
    Thanks for taking the time to contact the 1Password Support Team.
    This is an automated message to let you know that we have received your inquiry and are working as quickly as possible to get back to you.
    Your support ticket number is 159716.

    Regards,

    Arpit Master

  • ag_max
    ag_max
    edited August 2023
    Options

    Hi @amaster,

    I apologize in the delay in getting back to you, though I'm happy to see that our Integrations team was able to reply via email.

    To your question, you can absolutely send us an email even if you don't have an account. If you did have a 1Password account it does make it easier if you contact us using that address, though this isn't at all required for general questions.

    ref: Zd-#159716

This discussion has been closed.