Creating a Cisco AMP Client ID and API key for event queues
A Cisco AMP administrator must create a Client ID and an API key in the Cisco AMP for Endpoints portal. These keys are used to manage queues.
If you do not have administrator privileges, request the Client ID and API key values from your administrator. If you want QRadar® to automatically manage the event stream, you need these values when you configure a log source in QRadar.
Before you begin
- Log in to the Cisco AMP for Endpoints portal as an administrator.
- Click .
- In the API Credentials pane, click New API Credential.
In the Application name field, type a name, and then select
Read & Write.
You must have read & write access to manage event streams on your Cisco AMP for Endpoints platform.
- Click Create.
- From the API Key Details section, copy the values for the 3rd Party API Client ID and the API Key. You need these values to manage queues.
Create a Cisco AMP event stream.