Configure Delinea for Arctic Wolf monitoring

You can configure Delinea Platform® and Delinea Secret Server® to send the necessary logs to Arctic Wolf® for security monitoring.

These resources are required:

  • A user account with the Manage Webhooks permission. Built-in roles such as Platform Admin include this permission. For more information about Delinea roles and permissions, see Roles and Permissions.

Get the webhook token and URL

  1. Sign in to the Arctic Wolf Unified Portal.
  2. In the navigation menu, click Data Collection > Cloud Sensors.
  3. Click Add Account +.
  4. On the Add Account page, click Delinea Platform & Secret Server.
  5. In the Name field, enter a unique and descriptive name for the account.
  6. Click Generate Token.
  7. Copy the client credential and webhook URL, and then save them in a safe, encrypted location.
    Note: If you lose the webhook token, you must generate a new one. For more information, see Generate a new webhook token.

Create a Delinea log stream with a custom webhook

For more information about Delinea webhook management, see Webhook management.
  1. Sign in to the Delinea portal.
  2. Navigate to Settings > General settings > Webhooks.
  3. Click Create Webhook.
  4. Configure these settings:
    • Name — Enter a name for your webhook.
    • Endpoint URL — Enter the webhook URL from Get the webhook token and URL.
    • Description — Enter an optional description.
    • Webhook State — Keep the Enabled checkbox selected.
  5. In the Triggers section, keep this section blank to include all events by default.
  6. In the Custom Headers section, in the Key field, enter Authorization.
  7. In the Value field, enter the client credentials from Get the webhook token and URL.
    For example, Bearer 123456ab7cd8e9f.

Test the Delinea webhook connection

  1. From the Webhooks page in the Delinea portal, hover over the webhook that you created in Create a Delinea log stream with a custom webhook.
  2. Click > Test webhook.
    A toast message appears to confirm the successful test.
  3. Click > View Webhook Logs.
  4. Review the log table to confirm the success of your last action.