How to send a chronicle siem alert to other chronicle siem?

Hello,

I need to send alerts from one chronicle siem to another.

How can I do this?

Thank you

0 1 83
1 REPLY 1

You can use our Detections API and Search APIs to pull data from SecOps SIEM and then you can use our Ingestion API to push the data to another SecOps SIEM.

Detections API: https://cloud.google.com/chronicle/docs/reference/detection-engine-api

Search API: https://cloud.google.com/chronicle/docs/reference/search-api#listalerts

Rules API: https://cloud.google.com/chronicle/docs/reference/ingestion-api