{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":44480,"path":"security-management/security-incident-response/drilldown-api-lr.md","title":"Set up the REST API","bundle":null,"doc_type":null,"release":"australia","body":"\n# Set up the REST API\n\nYou use the LogRhythm REST API key to gather additional event details for individual alarm fields. The API key provides details that are unavailable using the LogRhythm REST API.\n\n## Before you begin\n\nRole required: LogRhythm Client Console/Platform Manager Administrator\n\n## About this task\n\nThis task is performed on the LogRhythm Client Console. Set up the LogRhythm REST API prior to installing the plugin from the ServiceNow Store.\n\n## Procedure\n\n1.  Navigate to the LogRhythm Client Console and select the **File** menu.\n\n2.  Click **New** to create a new user.\n\n    \\[Omitted image \"lr-soap-5-cropped.png\"\\] Alt text: File menu expanded in the LogRhythm Console.\n\n3.  In the **Is Person an Individual?** dialog that is displayed, click **Yes**.\n\n    \\[Omitted image \"lr-soap-6.png\"\\] Alt text: Is Person an Individual dialog.\n\n4.  In the Person Properties dialog that is displayed, fill in the Name fields.\n\n    Use a different name for the LogRhythm REST API than the one you used to create the REST API, for example, `REST API_2`.\n\n    \\[Omitted image \"lr-api-2-CDAPI.png\"\\] Alt text: Person Properties dialog with name fields highlighted.\n\n5.  Click **OK**.\n\n6.  Right-click the new listing in the Name column \\(**API\\_2\\_REST**\\) and, in the choice list, select **Create Case API Account**.\n\n    \\[Omitted image \"lr-api-3-CDAPI.png\"\\] Alt text: Create Case API Account in LogRhythm Console.\n\n    **Note:** The Case API is not used, but the credentials for the Case API Account and the LogRhythm REST API are the same.\n\n7.  In the Service Account Properties dialog, click **Generate**.\n\n    \\[Omitted image \"lr-api-4-CDAPI.png\"\\] Alt text: API Token in Service Account Properties dialog.\n\n8.  Click **Copy**.\n\n    \\[Omitted image \"lr-api-5-CDAPI.png\"\\] Alt text: Copy button on API Token API in Service Account Properties dialog.\n\n    You have now set up the LogRhythm REST API. You paste the string you copied in the previous step into your ServiceNow AI Platform instance in the LogRhythm REST API Token field during the configuration steps listed in [Install the plugin and configure LogRhythm](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/install-and-config-logrhythm.md).\n\n\n## What to do next\n\nYou are now ready to [Install the plugin and configure LogRhythm](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/install-and-config-logrhythm.md).\n\n**Parent Topic:**[LogRhythm Overview](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/ovrview-logrhythm.md)\n\n**Previous topic:**[LogRhythm Overview](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/ovrview-logrhythm.md)\n\n**Next topic:**[Install the plugin and configure LogRhythm](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/install-and-config-logrhythm.md)\n\n"}}