Kenna API Data Insert to SQL DB: Is it possible to use our Alteryx API service account

[brentmarion23]

Management of our present asset vulnerability database requires multiple exports to csv and a large volume of time spent manually parsing data to come up with a listing we can act on of new or unacknowledged and stagnant vulnerabilities. EDC Senior leadership is looking to automate this scope area identifying and taking action against these latent risks within our data centers.

This is the overarching goal of this project. We should be able to make use of api hooks to populate newly created table(s) in the EDC-Foundations SQL DB; once populated we should be able to aggregate the data and relate it to the ongoing remediation work that will be populated from our Cherwell api connection.

Thanks in advance.  

[Thableaus]

Hi @brentmarion23 

From what I understood you want to connect to Kenna Security through an API and automate the export of some useful tables in there using Alteryx, right?

You might be able to leverage the Download tool depending on how the documentation of the API looks like. From what I read it's just a HTTP request with a token that you need to send through the header, so it should be ok to do it.

Cheers,

[brentmarion23]

That is correct on what I am looking to do.  I appreciate your response and help.    

[danilang]

Hi @brentmarion23 

You need to ask a specific question.  Are you having trouble getting started on the process?  Trouble using the download tool?

Dan

[brentmarion23]

Good evening danilang,

I am having issues setting up my downloader tool properly.  I am using the text to input file to enter the API URL.

See screen captures.  Here is the information below.  I need to do some more homework on which piece of information goes in each field.  Any advice would be much appreciated.

• Basic
• Headers
• Payload
• Connection

Python

import requests, json

url = "https://api.kennasecurity.com:443/assets"

token = "123abc"

headers = {'content-type': 'application/json', 'X-Risk-Token': token}

api = requests.get(url, headers=headers)

response = api.json()

print(json.dumps(response, indent=4, sort_keys=True))

Thanks,

Brent

[brentmarion23 · Accepted solution]

Problem solved.  I just had to determine by base url, and get the correct token for authentification.

www.api(company_name).kennasecurity.com/assets/(ID)

Thanks,

Brent