skills.rest
pmoses-s1
pmoses-s1COMMUNITY
Explore all skills by this author →
GitHub

sentinelone-sdl-api

Access SentinelOne SDL API for log ingestion, queries, and configuration files.

Updated Aug 27, 2026
Search Tags:#api#queries#config#ingestion#sdl#sentinelone
One-click install
npx skills add https://github.com/pmoses-s1/claude-skills --skill sentinelone-sdl-api
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sentinelone-sdl-api
Source: https://github.com/pmoses-s1/claude-skills/tree/main/sentinelone-sdl-api
Command: npx skills add https://github.com/pmoses-s1/claude-skills --skill sentinelone-sdl-api

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a programmatic interface to SentinelOne's Singularity Data Lake (SDL) API for ingesting logs, running queries, and managing SDL configuration files, enabling automation and rapid workflows across SDL data sources.

Core Features & Use Cases

  • Ingest data: uploadLogs and addEvents to bring raw and structured data into SDL.
  • Query data: run log searches and numeric/timeseries queries via SDL API endpoints.
  • Manage configuration: listFiles, getFile, and putFile to deploy parsers, dashboards, alerts, and lookups.
  • Use case examples include ingesting logs from webhooks, issuing ad-hoc PQ/analytics, and updating parsers or dashboards in production.

Quick Start

Drop a credentials.json with SDL_XDR_URL and keys into your workspace, then ask the skill to uploadLogs or listFiles to begin.

Frequently Asked Questions about sentinelone-sdl-api

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate SentinelOne SDL log ingestion via API?▼

Automate SentinelOne SDL log ingestion programmatically by using a Python client to call uploadLogs and addEvents, bringing raw and structured data into the Singularity Data Lake via Bearer token authentication.

Can I run power queries and numeric queries against the Singularity Data Lake?▼

Run power queries and numeric queries against the Singularity Data Lake by executing API calls through a Python client, enabling ad-hoc analytics, log searches, timeseries, and facet queries.

How do I manage SDL configuration files like parsers and dashboards?▼

Manage SDL configuration files by using API endpoints to listFiles, getFile, and putFile, allowing you to deploy parsers, dashboards, alerts, and lookups directly into production environments.

Does the SentinelOne SDL API require separate tokens for reading logs and writing configs?▼

The SDL API uses Bearer tokens with per-method key resolution, automatically selecting the correct key chain for log_read, log_write, config_read, config_write, and console_token operations.

What credentials do I need to start using the SentinelOne SDL API client?▼

Provide a credentials.json file containing your SDL_XDR_URL and API keys in your workspace, then use the Python client or CLI shim to begin issuing queries and ingesting logs.

Can I use requests to interact with SentinelOne SDL endpoints?▼

Interact with SentinelOne SDL endpoints using Python requests, as the client relies on the requests library to handle log ingestion, search queries, and configuration file operations.

Related Skills

Explore More Software Engineering Skills→
0xhubed0xhubed
6

market-regimes

Identify market regimes and map them to trading guidance across crypto futures data.

Community
Intermediate
consigcody94consigcody94

IoTNet

Analyze IoT network traffic to detect protocols and security vulnerabilities.

Community
Advanced
hookdeckhookdeck
79

sendgrid-webhooks

Verify SendGrid webhook signatures and process email events.

Official
Advanced
Sentinel-OneSentinel-One
59

sdl-api

Manage and query SentinelOne Singularity Data Lake API data and configurations.

Official
Advanced