Keycloak
skycloak_create_siem_destination
Create a SIEM destination. Credentials are write-only and are not returned.
Remote skycloak/keycloak-mcp
Remote (network-hosted)
Other tools also called skycloak_create_siem_destination?
See providers with this name
Input Schema
{
"type": "object",
"properties": {
"s3": {
"type": [
"null",
"object"
],
"required": [
"auth_type",
"bucket",
"region"
],
"properties": {
"bucket": {
"type": "string"
},
"prefix": {
"type": "string"
},
"region": {
"type": "string"
},
"role_arn": {
"type": "string"
},
"auth_type": {
"type": "string",
"description": "authentication: access_key, iam_role, assume_role, or irsa (case-insensitive)"
},
"external_id": {
"type": "string"
},
"access_key_id": {
"type": "string"
},
"secret_access_key": {
"type": "string"
}
},
"additionalProperties": false
},
"http": {
"type": [
"null",
"object"
],
"required": [
"url",
"auth_type"
],
"properties": {
"url": {
"type": "string"
},
"headers": {
"type": "object",
"additionalProperties": {
"type": "string"
}
},
"password": {
"type": "string"
},
"username": {
"type": "string"
},
"auth_type": {
"type": "string",
"description": "authentication: none, bearer, or basic (case-insensitive)"
},
"bearer_token": {
"type": "string"
}
},
"additionalProperties": false
},
"name": {
"type": "string"
},
"type": {
"type": "string",
"description": "destination transport: syslog, s3, or http (case-insensitive)"
},
"batch": {
"type": [
"null",
"object"
],
"properties": {
"max_events": {
"type": [
"null",
"integer"
]
},
"max_interval_seconds": {
"type": [
"null",
"integer"
]
}
},
"additionalProperties": false
},
"source": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string",
"description": "data to forward: keycloak_events, application_logs, security_logs, or skycloak_audit (case-insensitive)"
},
"realms": {
"type": [
"null",
"array"
],
"items": {
"type": "string"
}
},
"cluster_ids": {
"type": [
"null",
"array"
],
"items": {
"type": "string"
}
},
"keycloak_event_types": {
"type": [
"null",
"array"
],
"items": {
"type": "string"
}
}
},
"additionalProperties": false
},
"syslog": {
"type": [
"null",
"object"
],
"required": [
"host",
"port",
"protocol",
"format"
],
"properties": {
"host": {
"type": "string"
},
"port": {
"type": "integer"
},
"format": {
"type": "string",
"description": "message format: cef, leef, rfc5424, or json (case-insensitive)"
},
"protocol": {
"type": "string",
"description": "transport: udp, tcp, or tls (case-insensitive)"
}
},
"additionalProperties": false
}
}
}