Bitdefender GravityZone Bitdefender GravityZone

Integrate Bitdefender GravityZone to retrieve endpoint security data

The Bitdefender GravityZone connector allows you to retrieve security protection and data for endpoints managed by your GravityZone console directly into OverView.

Objective

The Bitdefender GravityZone connector retrieves the following information:

  • Inventory of endpoints protected by Bitdefender
  • Status of antivirus protection and security engines
  • Security alerts and incidents detected

Prerequisites

  • Administrator access to the Bitdefender GravityZone console
  • Sufficient permissions to generate API keys
  • Network connectivity to Bitdefender API servers

Information to provide in OverView

FieldDescription
API KeyAPI key for authentication to GravityZone
API URLYour GravityZone API Access URL (found in My Account > Control Center API)

Procedure

Generate an API Key in GravityZone

  1. Sign in to the Bitdefender GravityZone console.
  2. Click your username in the upper right corner.
  3. Select My Account > API keys section.
  4. Click Add to create a new API key.
  5. Enter a descriptive description (e.g., "OverView Connector").
  6. Select the required APIs for read access to endpoints and alerts.
  7. Click Generate.
  8. Copy the API key immediately (it will only be displayed once).
  9. Note the rate limit: maximum 10 requests/second per API key.

Configure the Connector in OverView

  1. In OverView, go to Data Sources Settings > Sources.
  2. Select Bitdefender GravityZone and click Configure.
  3. Fill in the two required fields:
    • API Key (from step 8 above)
    • Access URL: your organization's API URL (found in My Account > Control Center API)
  4. Click Save Configuration.
Caution
API URL

Do not use a generic URL. Each GravityZone organization has a unique Access URL displayed in the console under My Account > Control Center API. Common formats include https://cloud.gravityzone.bitdefender.com (non-EU) and https://cloudgz.gravityzone.bitdefender.com (EU).

For detailed API documentation, see Bitdefender Public API Documentation.

Required Permissions

The API key must have the following permissions:

  • Read access to endpoint reporting
  • Read access to security alerts and incidents
  • Read access to protection statistics
Alternative: file import through DropPoint

The API access described above is the recommended method for this connector. Where it is not available (a segregated network, a version or licence without API, an export you already produce), OverView accepts file exports, to be uploaded to the bucket dedicated to Bitdefender GravityZone.

Where do the files go?

Bucket : s3://bitdefender/

Example : s3://bitdefender/export.csv

The procedure is described in the OverView DropPoint guide: generating credentials, configuring the client, then sending files from the OverView web interface, the AWS CLI or an SDK. Its examples come pre-filled with this bucket when you follow this link.

← PreviousWizNext →CrowdStrike Falcon