Trend Micro Vision One

Trend Micro Vision One is a threat defense platform that provides added value and new benefits beyond XDR solutions.

Creating an API Token for Trend Micro Vision One

Before configuring the Trend Micro Vision One connector in Lucidum, you must first create an API Token. Lucidum will use the API Token to access the Trend Micro Vision One API.

The Trend Micro Vision One console automatically generates an authentication token for each account with API access.

1. On the Trend Micro Vision One console, go to Account Management > User Accounts.

   Click the account name.

2. Copy the authentication token and securely store it.

   By default, an authentication token expires one year after creation. However, a Master Administrator can delete and re-generate a token at any time.

3. Click Close. 

Configuring the Connector for Trend Micro Vision One

To configure Lucidum to ingest data from Trend Micro Vision One:

1. Log in to Lucidum.

2. In the left pane, click Connector.

3. In the Connector page, click Add Connector.

4. Scroll until you find the Connector you want to configure. Click Connect. The Settings page appears.

5. In the Settings page, enter the following:

   • Host (required): The hostname or domain of Trend Micro Vision One API, for example, http://api.xdr.trendmicro.com . Other domains are available here: https://docs.trendmicro.com/en-us/enterprise/trend-micro-vision-one-automation-center/getting-started_001/regional-domains.aspx

   • API Token (required) - Trend Micro Vision One API bearer token. 

   • Verify SSL. For future use.

6. To test the configuration, click Test.

   • If the connector is configured correctly, Lucidum displays a list of services that are accessible with the connector.

   • If the connector is not configured correctly, Lucidum displays an error message.