Skip to main content

​
API configuration in CrowdStrike

  1. Sign in to the CrowdStrike portal.
  2. In the menu, click Support and Resources → Api clients and keys.
  3. Select Create API client on the right side of the menu.
  4. Assign a name to the API; the standard is API-Flexxclient.
  5. Without leaving the menu, select the following fields in the Read column:
    • Alerts
    • Detections
    • Hosts
    • Incidents
    • Quarantined Files
  6. Click Create.
  7. Copy the following three fields (they cannot be retrieved later).
    • Client ID
    • Secret
    • Base URL

​
Configuration on the Flexxible platform

To perform the integration, you must have at least the Organization Administrator role.
  1. From the user menu, select the organization/tenant where you want to enable the integration.
  2. Go to Settings → Integrations → CrowdStrike section.
  3. Click Edit and enter the following data:
  • API client ID. Unique identifier that represents the client on the CrowdStrike platform.
  • Secret string. Secret key associated with the client ID.
  • Region. Geographic location of the client’s cloud environment. The field offers eu, eu-1, us-gov-1, us-1, and us-2 as options. Select the CrowdStrike region.
  1. Click Save.
The CrowdStrike integration can be performed at the tenant level, allowing you to configure a different account for each one. If the integration is done at the organization level, it will extend to all its suborganizations.