Before you begin
To configure Blumira, you will need to obtain a “Provisioning Hash” or API key from LastPass that provides Blumira access to your data through the LastPass Enterprise API. You will also need to obtain your Customer ID, or “cid” from Lastpass by following these steps:
- Log in to Lastpass.
- Under Advanced Options, select Enterprise API.
- Click on Create Your Provisioning Hash and note the resulting value. This is your Lastpass API Secret.
- To obtain your Customer ID, or “cid”, return to the Enterprise API page. Under Authentication Parameters, your “cid” will be listed as an authentication parameter. Take note of this numeric value – the quotation marks are not part of the value.
Configuring Blumira
Next, you will need to enable your Blumira sensor to connect to LastPass, using the API Secret and cid you obtained. This connection is managed through the LastPass module, which you will install on one of your Blumira sensors.
To add a module on an existing sensor and provide credentials:
- In Blumira, click Settings.
- Click Sensors.
- Click the sensor on which you want to add a module.
- On the detail page for the sensor, scroll down and click Add Module.
- In the Add New Module window, select the newest version of this integration’s module. Note: For the best stability and performance, Blumira will update the module version when old versions are deprecated.
- Enter the credentials that you gathered in the “Before you begin” section above.
- (Optional) Type a name for this log deployment in the Log Source Name box. This name is what will appear in the “device_address” column in the results of your event data queries. If you might have additional modules collect logs for different integrations in the future, this will help you distinguish them. Note: The name can only contain alphanumeric characters, periods, and hyphens; no spaces or underscores are allowed.
- Click Install.