Edge Delta Securonix Destination

Send logs, metrics, and traces to a Securonix HTTP receiver endpoint.

  2 minute read  

Overview

The Securonix destination streams events over HTTP to Securonix SIEM. Incoming logs, metrics, traces, and patterns are forwarded to the configured endpoint using the provided API key.

Example Configuration

Screenshot Screenshot

This configuration defines an Edge Delta output node named securonix_destination that sends logs, metrics, traces, and pattern data to a Securonix HTTP receiver. It uses the specified endpoint URL to stream data over HTTP and authenticates with the provided api_key in the X-API-Key header.

nodes:
  - name: securonix_destination
    type: securonix_output
    endpoint: "https://tenant.securonix.net/http-event-receiver/sourcename/1iafje81e1iafje81e"
    api_key: my_api_key

Required Parameters

name

A descriptive name for the node. This is the name that will appear in pipeline builder and you can reference this node in the YAML using the name. It must be unique across all nodes. It is a YAML list element so it begins with a - and a space followed by the string. It is a required parameter for all nodes.

nodes:
  - name: <node name>
    type: <node type>

type: securonix_output

The type parameter specifies the type of node being configured. It is specified as a string from a closed list of node types. It is a required parameter.

nodes:
  - name: <node name>
    type: <node type>

endpoint

Securonix HTTP receiver endpoint URL.

nodes:
  - name: <node name>
    type: securonix_output
    endpoint: https://tenant.securonix.net/http-event-receiver/sourcename/1iafje81e1iafje81e
    api_key: <api_key>

api_key

Securonix API key used to authenticate the requests. This value is sent in the X-API-Key header.

This field supports secret references for secure credential management. Instead of hardcoding sensitive values, you can reference a secret configured in your pipeline.

To use a secret in the GUI:

  1. Create a secret in your pipeline’s Settings > Secrets section (see Using Secrets)
  2. In this field, select the secret name from the dropdown list that appears

To use a secret in YAML: Reference it using the syntax: '{{ SECRET secret-name }}'

Example:

field_name: '{{ SECRET my-credential }}'

Note: The secret reference must be enclosed in single quotes when using YAML. Secret values are encrypted at rest and resolved at runtime, ensuring no plaintext credentials appear in logs or API responses.

nodes:
  - name: <node name>
    type: securonix_output
    endpoint: <endpoint>
    api_key: my_api_key

Optional Parameters

parallel_worker_count

Number of workers sending data in parallel. Defaults to 2.

nodes:
  - name: <node name>
    type: securonix_output
    endpoint: <endpoint>
    api_key: <api_key>
    parallel_worker_count: 4