1. Expel Support Center
  2. Connect your technology
  3. Network integrations

ExtraHop Setup for Workbench

Sharon Burton
  • Updated

This guide helps you connect your ExtraHop installation to the Expel Workbench.

Tip

This article was accurate at the time of writing, but changes happen. If you find the instructions are outdated, leave a description in the comment field below and let us know!

Before you start

You must have:

  • An ExtraHop user account with admin-level permissions to create another account.

Step 1: Enable console access

Having read-only access to the interface of your technology allows Expel to dig deeper during incident investigations. Our device health team uses this access to investigate potential health issues with your tech.

  1. Login to the ExtraHop console using the admin account.

  2. Create a new user account named Expel-Integration with these permissions:

    • Full Read-only permissions.

    • "write" : "personal" (This is required for API key generation.)

  3. Login to the ExtraHop console using the Expel-Integration account.

  4. Click the user bubble to open a dropdown with an API access option, then select API access. If you need instructions on creating an API key in ExtraHop, click here.

    ExtraHop_ClickUserBubble.png

  5. Enter a description for the API key, then click Generate. Make a note of the key for later use.

    ExtraHop_GenerateAPIkey.png

Step 2: Configure the technology in Workbench

Now that we have the correct access configured and noted the credentials, we can integrate your tech with Workbench.

  1. Click this link to open Workbench. The link opens the Add Security Device screen directly. (You may need to log in first.)

    ExtraHop_AddSecDev.png

  2. Fill in the Connection Settings fields like this:

    • Add a Name and Location that are meaningful to you.

    • For Server address, use the ExtraHop server URL.

    • For API key, use the key generated in Step 1.

  3. (Optional) To grant console access, fill in the Console Login fields like this:

    • For Console URL, use the ExtraHop console URL.

    • For Username and Password, use the username and password created for the Expel-Integrations account.

  4. Click Save.

To check if alerts are coming through, navigate to Alerts on the console page. Click the icon in the upper right to switch to grid view, then check the list for device alerts.

  • Was this article helpful?

  • 0 out of 0 found this helpful

Related articles