> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# LogRhythm

> Logrhythm is a Security Information and Event Management (SIEM) platform that provides comprehensive threat detection, investigation, and response capabilities. It centralizes log data from various IT systems and applications, enabling security teams to analyze and correlate information for identifying potential security incidents. Logrhythm offers a robust suite of tools for threat hunting, incident response, compliance, and security analytics.

## Creating a LogRhythm connection[​](#creating-a-logrhythm-connection "Direct link to Creating a LogRhythm connection")

## Using API Token[​](#using-api-token "Direct link to Using API Token")

To create the connection you need:

* An API Address
* An API Token

### Obtaining the credentials[​](#obtaining-the-credentials "Direct link to Obtaining the credentials")

#### API Token[​](#api-token "Direct link to API Token")

1. Log in to the LogRhythm Client Console as a Global Administrator.
2. Navigate to Deployment Manager -> Third Party Applications.
3. Locate an exiting application or create a new one.
4. Double-click the application to open its properties.
5. Click Generate Token to create a new API token.

### Creating your connection[​](#creating-your-connection "Direct link to Creating your connection")

1. In the Blink platform, navigate to the **Connections** page > **Add connection**. A New Connection dialog box opens displaying icons of external service providers available.

2. Select the **LogRhythm** icon. A dialog box with name of the connection and connection methods appear.

3. (Optional) Edit the name of the connection. At a later stage you cannot edit the name.

4. Select **API Token** as the method to create the connection.

5. Fill in the parameters:

   * The API Address
   * The API Token

6. (Optional) Click **Test Connection** to test it.

7. Click **Create connection**. The new connection appears on the **Connections** page.