Authentication tokens
This is where you can manage the existing OAuth 2.0 tokens or generate new ones. You can create tokens to query data using the Devo API or tokens to send data using an HTTP endpoint.
To generate a new token:
- Click Create new token.
- Enter a Token name.
- Select one of the three possible allowed actions for the new token.
Sending data via HTTP Create a token to send data using HTTP. See the HTTP endpoint article for more information. Query data using REST API Use this token to restrict REST API query requests to a specific set of tables. With this kind of token you can start, stop and remove your own jobs or any matching the target tables. Query data and manage jobs using REST API This is the same as Query data using REST API, but allows you to start, stop, or remove any job within your domain. See the Authorizing Query API requests article for more information. Use the Target Table(s) field to limit the tables in which the token will be used. Use wildcards as needed to reference a family of tables. The following table describes how to use wildcard symbols to specify the tables in the Target Table(s) field.
Wildcard Description Example Matches
?Matches a single character where the wildcard is placed.
siem.logtrust.web.inf?
siem.logtrust.web.info
firewall.fortinet.even?.user firewall.fortinet.event.user *
Matches zero or more characters in only one tag element
siem.logtrust.alert.*
siem.logtrust.alert.info
siem.logtrust.alert.error
web.a*.error web.apache.error **
Matches zero or more characters in one or more tag elements
web.aws.**
web.aws.elb.access
firewal.fortinet.**
firewal.fortinet.event.user
firewal.fortinet.event.vpn
firewall.fortinet.traffic.forward
firewall.fortinet.traffic.local
- Click Accept to create the token.
- To disable a token, place the cursor on the required row to highlight it and an ellipsis icon will appear at the end of the row. Click it and select Disable. You will be able to enable it later using the ellipsis menu again and clicking Enable.
- To delete an existing token, place the cursor on the required row to highlight it and an ellipsis icon will appear at the end of the row. Click it and select Delete. When you delete a token, it is completely removed from the platform. If you disable a token, you will be able to enable it later using the ellipsis menu.
Manage tokens
To view and edit the details of a token, go to Administration → Data Management and select the API & OData Feeds tab. Learn more in the API & OData feeds article.