LevelBlue USM Anywhere 

LevelBlue USM Anywhere is a managed security service provider.

The following datasets are supported:

• Alarms

• Events

• Alarm Labels (CDC is not supported)

For more information about the API, see USM Anywhere APIs.

• For more information about connecting to SaaS applications, see Herstellung einer Verbindung zu SaaS-Anwendungen.

• For more information about Lite connectors, see Klassifizierungen für SaaS-Anwendungskonnektoren.

• Depending on your use case, you might need to install Data Movement Gateway to move data from SaaS applications. For more information, see Wann ist Data Movement Gateway erforderlich?.

Supported update methods

For more information, see Eine Übersicht über Zielaktualisierungsmethoden.

Landing tasks:

• Change data capture (CDC)

• Reload and compare

Replication tasks:

• Change data capture (CDC) using Change Tables

• Full load

Landing data in a data lake tasks:

• Change data capture (CDC)

• Reload

Preparing for authentication

To access your LevelBlue USM Anywhere data, you need to authenticate the connection with your account credentials.

To get your client ID and secret code:

1. Sign in to USM Anywhere.
2. Click your profile icon and select Profile Settings. You are on your Profile page.
3. Select the API Clients tab.
4. Click New Client.
5. Enter a name. The supported characters are lowercase letters [a-z], numbers [0-9], and hyphens [-].
6. Click Create Client. The client ID and secret code are generated.

Creating the connection

For more information, see Herstellung einer Verbindung zu SaaS-Anwendungen.

1. Fill in the required connection properties.

2. Provide a name for the connection in Connection name.

3. Select Open connection metadata to define metadata for the connection when it has been created.

4. Click Create.