Integrating TrendAI Vision One

Integrating TrendAI Vision One

This integration has been tested with TrendAI Vision One API version 3.0.

The TrendAI Vision One integration provides centralized collection of security activity from TrendAI Vision One to Barracuda XDR. Once configured, Barracuda XDR periodically connects to the TrendAI Vision One REST API and ingests supported data for monitoring, analysis, and investigation workflows.

Supported data sources include:

  • Alerts

  • Audit logs

  • Detections

  • Endpoint activity

  • Network activity

  • Telemetry

TrendAI Vision One unifies detection and response across email, endpoints, servers, cloud workloads, and network environments. Integrating it with Barracuda XDR helps consolidate visibility and investigation data in one place.

How the integration works

Barracuda XDR uses the TrendAI Vision One REST API to poll for supported event types at regular intervals. The retrieved events are then ingested into the XDR platform for ongoing monitoring and security operations.

Enable only the collection methods you plan to use. This keeps configuration focused and helps reduce unnecessary data collection.

Requirements

Make sure you have the following before starting setup:

  • Access to the TrendAI Vision One console

  • Permission to create or manage API keys in TrendAI Vision One

  • Access to the Barracuda XDR dashboard

  • The correct regional API domain for your TrendAI Vision One tenant

To configure permissions and API token in TrendAI Vision One

  1. Sign in to the TrendAI Vision One console.

  2. Go to Administration > API Keys.

  3. Click Add API key.

  4. Configure the API key settings:

    • Name - Type a meaningful name so the key is easy to identify later.

    • Role - Assign a predefined or custom role with the permissions required for the data streams you want to collect.

    • Expiration time - Set how long the API key remains valid. By default, API keys expire one year after creation.

    • Status - Ensure the key is enabled.

    • Details - Add any optional descriptive information that helps with administration.

  5. Click Add.

  6. Copy the API key value and store it securely. You need it in the To integrate TrendAI Vision One with Barracuda XDR Dashboard procedure.

The role assigned to the API key must include appropriate access to the TrendAI Vision One features that back each data stream.

Datastream

Section

Required permissions

Datastream

Section

Required permissions

Alert

Platform Capabilities > Agentic SIEM & XDR > Workbench

View, filter, and search

Audit

Settings > Administration > Audit Logs

View, filter, and search; Export and Download

Detection

Platform Capabilities > Agentic SIEM and XDR > XDR Data Explorer

View queries and Watchlist, and filter and search queries

Endpoint activity

Platform Capabilities > Agentic SIEM and XDR > XDR Data Explorer

View queries and Watchlist, and filter and search queries

Network activity

Platform Capabilities > Agentic SIEM and XDR > XDR Data Explorer

View queries and Watchlist, and filter and search queries

Telemetry

Platform Capabilities > Agentic SIEM and XDR > XDR Data Explorer

View queries and Watchlist, and filter and search queries

For additional background on TrendAI Vision One role permissions, see Account Role Permissions.

API keys are sensitive credentials. Treat the token like a password and store it securely. If you suspect compromise, revoke the key and generate a new one.

To integrate TrendAI Vision One with Barracuda XDR Dashboard

  1. In Barracuda XDR Dashboard, click Integrations.

  2. In the TrendAI Vision One card, click Setup.

    A screenshot of the TrendAI Vison One Card
  3. Enable only the collection methods you want to use.

  4. For API-based log collection:

    • Click the Enabled checkbox.

    • Enter the correct Regional Domain URL.

    • Paste the API Token that you generated in the To configure permissions and API token in TrendAI Vision One procedure.

      A screenshot of the TrendAI Vison One Setup page
  5. Click Save and continue.

After the integration is saved with the correct region, token, and permissions, Barracuda XDR can begin collecting supported TrendAI Vision One data streams.

Troubleshooting

If you have issues completing the integration, do the following:

  • Confirm the API key is enabled and has not expired.

  • Verify that the role assigned to the API key includes the required permissions for each enabled data stream.

  • Make sure the regional domain URL matches your TrendAI Vision One tenant location.

  • Re-paste the API token carefully to avoid hidden spaces or truncation.

  • Check that only the intended collection methods are enabled.


We value your feedback.
If you have questions, suggestions, or feedback on our documentation, contact the Campus Product Documentation team.
For general product inquiries or technical support, please contact the global Barracuda Support team.