AI Engine API

📘

Only users with the Global Admin or Restricted Admin roles can use AIE API endpoints.

Released with LogRhythm SIEM version 7.23.0, the AI Engine API allows users to more effectively manage their AI Engine rules and replace manual steps that could previously only be performed in the Client Console.

The AI Engine API endpoints are protected by JWT-based authentication and role-based authorization.

With the AI Engine API, you can:

  • Import/Export an AIE rule by ID;
  • Enable/Disable an AIE rule by ID; and
  • Restart the AIE service on a server.

The Database Authentication strategy, Database User ID, Database Password, and Log Level can be set within Configuration Manager.