Use the Data Retrieval API

To use the Data Retrieval API, create a personal API key and then invoke the API.

These resources are required:

Create a personal API key

Personal API keys (PAKs) allow you to access Arctic Wolf APIs.

Note: Use the Unified Portal for this task, not the MSP portal. If you are a conglomerate or MSP customer, we recommend creating the PAK in the parent or MSP internal Unified Portal. If you create the PAK within a child or MSP child customer portal, the PAK will still be associated to your User permissions, not based on the Org you create the PAK in.
For more information, see Personal API keys.
  1. Sign in to the Arctic Wolf Unified Portal.
  2. In the navigation menu, click Organization Profile > Personal API Keys.
  3. Click Create an API Key.
  4. In the Name field, enter a name to identify the API key. For example, the third-party application that will use the key.
  5. In the Expiry field, select the time period after which the API key will expire.
  6. Click Create Key.
  7. Copy the token to a safe, encrypted location.
    After closing the window, you will not be able to view the token again.

Invoke the Data Retrieval API

  1. Navigate to Data Retrieval API specifications.
  2. Invoke the Data Retrieval API, using the personal API key to authenticate as needed.
    You can use the Arctic Wolf platform or download the specifications and use a third-party platform such as Postman.