Generate a Netskope API Token

A Netskope API token is required to configure the Netskope Add-on in Splunk. You will need authorized credentials to log in to the Netskope Tenant.

1.  In the Netskope tenant, go to Settings.
   
2. Click Administration.
   
3. Click Administrators & Roles.
   
4. On the Roles tab, click New to create a new role with all required permissions.
   
5. Enter a Role Name and provide all the permissions.
   Here are the Functional Areas to be addressed. Review the table, find the functional area of the desired endpoint, search that functional area on the portal as shown below, and modify the permissions. This table shows the minimum access required for each functional area.

   Permission	Functional Area	Access
   Administration	Audit Log	View
   DLP	Incident Infrastructure > Infrastructure logs On-Premises	View View View
   Access Control	NS Client > Devices	Manage
   Events and Analytics	SkopeIT >AlertsApplication Events Endpoint Events Network Events Page Events Transaction Events	View View View View View View

   

6. Click Save.
   
7. On the Administrators tab, click Service Account.
8. Enter a Service Account Name, select the Role you created, provide a time for Generate token now with expiry as desired, and then click Create.
   
9. Copy the token, as it will not be available after this pop-up is closed.