---
title: "Integrate ExtraHop RevealX with Red Canary"
slug: "integrate-extrahop-revealx-with-red-canary"
updated: 2026-09-09T16:09:35Z
published: 2026-09-09T16:09:35Z
canonical: "docs.redcanary.com/integrate-extrahop-revealx-with-red-canary"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.redcanary.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Integrate ExtraHop RevealX with Zscaler MDR

Integrating ExtraHop RevealX with Zscaler MDR provides a powerful combination of advanced network detection and response capabilities. By combining our expert threat hunting and incident response with ExtraHop’s real-time network visibility and threat detection you can significantly enhance your ability to identify, investigate, and neutralize complex cyberattacks. To integrate ExtraHop RevealX with Zscaler MDR, follow the procedure below from beginning to end.

## **Step 1: ExtraHop RevealX–Create REST API credentials**

Zscaler MDR uses your representational state transfer (REST) API credentials to make REST calls to your cloud instance in order to start receiving your alerts.

1. From your ExtraHop dashboard, click **system settings**.
2. From the Administration section, click **API Access**.
3. Click **Create Credentials**.

![1.png](https://cdn.document360.io/75147bee-bf0d-444c-8afb-6e83b11ec0ef/Images/Documentation/9362374475031.png?sv=2026-02-06&spr=https&st=2026-11-04T15%3A03%3A38Z&se=2026-11-04T16%3A03%3A38Z&sr=c&sp=r&sig=KM4%2B2lYM9E0ccFB9q7UlVWHhQCQ4lsSNUbnF%2Bo4B74w%3D)
4. Name your REST API Credential.
5. From the System Access section, select **Full read-only**.
6. From the NDR Module Access section, select **Full access**.
7. From the NPM Module Access section, select **Full access**.
8. From the Packet And Session Key Access section, select **No access**.

![](https://cdn.document360.io/75147bee-bf0d-444c-8afb-6e83b11ec0ef/Images/Documentation/image(210).png?sv=2026-02-06&spr=https&st=2026-11-04T15%3A03%3A38Z&se=2026-11-04T16%3A03%3A38Z&sr=c&sp=r&sig=KM4%2B2lYM9E0ccFB9q7UlVWHhQCQ4lsSNUbnF%2Bo4B74w%3D)
9. Click **Save**.
10. Copy and save the **API Endpoint**, **ID,** and **Secret** for your REST API Credentials.

**![3.png](https://cdn.document360.io/75147bee-bf0d-444c-8afb-6e83b11ec0ef/Images/Documentation/9362374439319.png?sv=2026-02-06&spr=https&st=2026-11-04T15%3A03%3A38Z&se=2026-11-04T16%3A03%3A38Z&sr=c&sp=r&sig=KM4%2B2lYM9E0ccFB9q7UlVWHhQCQ4lsSNUbnF%2Bo4B74w%3D)**

## **Step 2: Zscaler MDR–Connect ExtraHop RevealX API REST credentials to Zscaler MDR**

Connect your ExtraHop API REST credentials to Zscaler MDR to start sending your alerts.

1. In the Zscaler MDR portal, click **Integrations**, then click **Add Integration.**

![Add a new Red Canary integration](https://cdn.document360.io/75147bee-bf0d-444c-8afb-6e83b11ec0ef/Images/Documentation/integrations-main.png?sv=2026-02-06&spr=https&st=2026-11-04T15%3A03%3A38Z&se=2026-11-04T16%3A03%3A38Z&sr=c&sp=r&sig=KM4%2B2lYM9E0ccFB9q7UlVWHhQCQ4lsSNUbnF%2Bo4B74w%3D)
2. Type and select ExtraHop RevealX.

![](https://cdn.document360.io/75147bee-bf0d-444c-8afb-6e83b11ec0ef/Images/Documentation/x360.png?sv=2026-02-06&spr=https&st=2026-11-04T15%3A03%3A38Z&se=2026-11-04T16%3A03%3A38Z&sr=c&sp=r&sig=KM4%2B2lYM9E0ccFB9q7UlVWHhQCQ4lsSNUbnF%2Bo4B74w%3D)
3. Click **Configure**.
4. Enter a Name for your external alert source.
5. Select a Display Category.
6. Under the Ingest Format/Method dropdown, select **ExtraHop via API Poll**.
7. Enter your ExtraHop Client ID from [Step 1.10](https://redcanary.document360.io/docs/integrate-extrahop-revealx-360-with-red-canary#:~:text=Copy%20and%20save%20the%20API%20Endpoint%2C%20ID%20and%20Secret%20for%20your%20REST%20API%20Credentials.).
8. Enter your ExtraHop Client Secret from [Step 1.10](https://redcanary.document360.io/docs/integrate-extrahop-revealx-360-with-red-canary#:~:text=Copy%20and%20save%20the%20API%20Endpoint%2C%20ID%20and%20Secret%20for%20your%20REST%20API%20Credentials.).
9. Enter your ExtraHop API Host from [Step 1.10](https://redcanary.document360.io/docs/integrate-extrahop-revealx-360-with-red-canary#:~:text=Copy%20and%20save%20the%20API%20Endpoint%2C%20ID%20and%20Secret%20for%20your%20REST%20API%20Credentials.).

![5.png](https://cdn.document360.io/75147bee-bf0d-444c-8afb-6e83b11ec0ef/Images/Documentation/9362340187415.png?sv=2026-02-06&spr=https&st=2026-11-04T15%3A03%3A38Z&se=2026-11-04T16%3A03%3A38Z&sr=c&sp=r&sig=KM4%2B2lYM9E0ccFB9q7UlVWHhQCQ4lsSNUbnF%2Bo4B74w%3D)
10. Click **Save Configuration**.
11. Click **Edit Configuration**.
12. Click **Activate**.