Powered by

# Create API Token

In CrowdStrike, create a new API token with the following permissions:

API Permissions
Identity Protection Entities Read & Write
Identity Protection GraphQL Write

reference: https://falcon.crowdstrike.com/documentation/184/identity-protection-apis

You will need the following when setting up the configuration in Splunk during the next steps:

  1. Client ID
  2. Secret key
  3. Cloud Environment (US Commercial, US Commercial 2, EU Cloud, US GovCloud)