Skip to main content

​
Overview

The ObserveIT integration enables ThreatAware to collect data from ObserveIT, providing visibility into your security posture and cyber asset management.
Connection Method: API Setup Time: 15-30 minutes Access Required: Administrator account with API permissions

​
Use cases

Device & Asset Tracking

Monitor devices and assets managed by ObserveIT

Security Compliance

Track security posture and compliance status

User & Access Management

Identify users, roles, and access patterns

Threat Detection

Detect threats and vulnerabilities in real-time

​
Setup instructions

1

Log in to the ThreatAware Dashboard

  • Navigate to Settings → Integrations.
2

Search for ObserveIT

  • Use the search bar to locate ObserveIT.
3

Initiate Connection

  • Click ‘Connect’. A pop-up window will appear.
4

Input Details

  • Enter the required details:
  • API Key: YOUR_API_KEY_HERE
  • API URL: YOUR_API_URL_HERE
5

Authorization and Setup

6

Verify Connection

  • Confirm successful connection by checking:
  • The status message on the dashboard.
  • Test data retrieval from ObserveIT.
  • Connection logs for any errors.
7

Troubleshooting Common Issues

  • Verify your API key and URL are correctly entered.
  • Check network connectivity.
  • Refer to the ThreatAware troubleshooting guide for additional support.
8

Finalize Setup

  • Save your configurations and exit. Follow these steps to ensure a smooth integration of ObserveIT with ThreatAware for optimal cyber asset management.

​
Data collected

The ObserveIT integration provides:
  • Device and asset information
  • Security compliance and posture data
  • User and access information
  • System performance metrics
  • Configuration and policy information

​
Required credentials

To set up the ObserveIT integration, you will need:
  • API Key or Token: Obtain from ObserveIT admin console
  • API Secret or Client Secret: Keep this secure
  • API Endpoint URL: The ObserveIT API base URL
  • Service Account: Admin account or dedicated integration user
  • Service Account Password: Associated credentials
Create a dedicated service account specifically for ThreatAware integration and store all credentials securely in your organisation’s password manager.

​
Verification and testing

After setup, verify the integration is working correctly:
  1. Check Integration Status
    • Navigate to Settings → Integrations in ThreatAware
    • Confirm the integration shows Active status
    • Check the last sync timestamp
  2. Verify Data Collection
    • Wait up to 60 minutes for the initial data collection
    • Verify data appears in device details or dashboards
  3. Test Queries
    • Create a test query to filter data from this integration
    • Verify results match your expectations

​
Troubleshooting

Symptoms: Integration fails to connect or shows errorSolutions:
  • Verify all credentials are correct and copied without extra spaces
  • Ensure the API endpoint URL is accessible from ThreatAware
  • Check firewall rules allow outbound HTTPS (port 443) to the API endpoint
  • Confirm API credentials have not expired
  • Verify the service account has necessary permissions
Symptoms: Invalid credentials errorSolutions:
  • Double-check the API key and secret are correct
  • Verify the API credentials have not been revoked
  • Ensure you are using the correct API version
  • Check if IP whitelisting is required
  • Review admin logs for authentication failures
Symptoms: Integration active but no data visibleSolutions:
  • Wait 60 minutes for initial synchronization
  • Verify API credentials have read permissions
  • Check the service account can access required data
  • Ensure data exists in the source system
  • Review ThreatAware integration logs
Symptoms: Only some data is being collectedSolutions:
  • Verify the service account permissions for all resources
  • Check for API rate limit issues
  • Review source system for data availability
  • Contact ThreatAware support if the issue persists

​
Best practices

Security Considerations
  • Create a dedicated service account specifically for the ThreatAware integration
  • Use read-only API permissions (never grant write access)
  • Store credentials securely in your organisation’s password manager
  • Rotate API credentials annually or per your security policy
  • Monitor authentication failures and API usage regularly
  • Review and audit integration activity periodically
  • Enable multi-factor authentication on the service account if available
  • Restrict the service account to only necessary resources and permissions