Configure Wiz for Arctic Wolf monitoring

You can configure Wiz® to send the necessary logs to Arctic Wolf® for security monitoring.

These resources are required:

  • A Wiz Cloud license
  • Optional: A Wiz Defend license if you want to receive detection endpoint alerts
  • Administrator access to the Wiz portal

Obtain Wiz API credentials

Complete the steps in the Wiz Arctic Wolf Integration documentation.
Note: You must sign in to the Wiz portal to view the link.
CAUTION: Scoping the integration to monitor a specific project only is not supported. Leave the Project field blank when generating the API credentials in the Wiz portal to avoid causing the cloud sensor deployment to fail.

Provide Wiz credentials to Arctic Wolf

  1. Sign in to the Arctic Wolf Unified Portal.
  2. In the navigation menu, click Data Collection > Cloud Sensors.
  3. Click Add Account +.
  4. On the Add Account page, click Wiz.
  5. Configure these settings:

    • Account Name — Enter a unique and descriptive name for the account.

    • Base URL — Enter the endpoint URL from Obtain Wiz API credentials. For example, https://api.region.app.wiz.io/.
    • Client ID — Enter the client ID from Obtain Wiz API credentials.
    • Client Secret — Enter the client secret from Obtain Wiz API credentials.

    • Credential Expiry — Enter the credential expiration date, if applicable.

  6. Click Test and submit credentials.