---
title: TrendAI Vision One XDR
description: Gain insights into TrendAI Vision One XDR logs
breadcrumbs: Docs > Integrations > TrendAI Vision One XDR
---

# TrendAI Vision One XDR
Integration version1.1.0          TrendAI Vision One XDR - Workbench AlertsTrendAI Vision One XDR - Workbench AlertsTrendAI Vision One XDR - Observed Attack TechniquesTrendAI Vision One XDR - Observed Attack TechniquesTrendAI Vision One XDR - Observed Attack TechniquesTrendAI Vision One XDR - Observed Attack Techniques
## Overview{% #overview %}

[TrendAI Vision One XDR](https://www.trendmicro.com/en_in/business/products/detection-response/xdr.html) collects and automatically correlates data across multiple security layers: email, endpoint, server, cloud workload, and network. This enables faster threat detection, enhances investigation and response times through improved security analysis.

This integration ingests the following logs:

- **Workbench Alerts**: This endpoint contains information about all the standalone alerts triggered by detection models.
- **Observed Attack Techniques**: This endpoint contains information about observed attack techniques from Detections, Endpoint Activity, Cloud Activity, Email Activity, Mobile Activity, Network Activity, Container Activity, and Identity Activity data sources.

This integration collects logs from the sources listed above and sends them to Datadog for analysis with our Log Explorer and Cloud SIEM products

- [Log Explorer](https://docs.datadoghq.com/logs/explorer.md)
- [Cloud SIEM](https://www.datadoghq.com/product/cloud-siem/)

## Setup{% #setup %}

### Generate API Credentials in TrendAI Vision One XDR{% #generate-api-credentials-in-trendai-vision-one-xdr %}

1. In the TrendAI Vision One console, go to on the left side-bar menu and visit **Administration > API Keys**.
1. Generate a new authentication token. Click **Add API key**. Specify the settings of the new API key with the following:
   - **Name**: A meaningful name that can help you identify the API key
   - **Role**: The user role assigned to the key. Select **SIEM** from dropdown.
   - **Expiration time**: The time the API key remains valid.
   - **Status**: Whether the API key is enabled.
   - **Details**: Extra information about the API key.
1. Click **Add**.
1. To identify the Host Region of your TrendAI Vision One XDR console please refer [here](https://success.trendmicro.com/en-US/solution/ka-0015959).

### Connect your TrendAI Vision One XDR Account to Datadog{% #connect-your-trendai-vision-one-xdr-account-to-datadog %}

1. Add your Host Region and API Key.

| Parameters  | Description                                         |
| ----------- | --------------------------------------------------- |
| Host Region | The Region of your TrendAI Vision One XDR Console.  |
| API Key     | The API Key of your TrendAI Vision One XDR Console. |

1. Click the Save button to save your settings.

## Data Collected{% #data-collected %}

### Logs{% #logs %}

The TrendAI Vision One XDR integration collects and forwards Workbench Alerts and Observed Attack Techniques logs to Datadog.

### Metrics{% #metrics %}

TrendAI Vision One XDR does not include any metrics.

### Service Checks{% #service-checks %}

TrendAI Vision One XDR does not include any service checks.

### Events{% #events %}

TrendAI Vision One XDR does not include any events.

## Support{% #support %}

For further assistance, contact [Datadog Support](https://docs.datadoghq.com/help/).