# NG SIEM - 1Password Integration

## <span style="color: rgb(53, 152, 219);">**1Password Events Reporting Integration Manual**</span>

<span style="color: rgb(0, 0, 0);">With **1Password Business**, you can forward account activity to your SIEM system using the<span style="color: rgb(132, 63, 161);"> **[1Password Events API](https://support.1password.com/events-reporting/)**</span>. This enables centralized monitoring, improved visibility, and enhanced response to security-related events across your organization.</span>

---

### <span style="color: rgb(53, 152, 219);">**Key Benefits**</span>

<span style="color: rgb(0, 0, 0);">When integrated with your SIEM, 1Password Events Reporting allows you to:</span>

- <span style="color: rgb(0, 0, 0);">**Retain 1Password event data** according to your organization's policies</span>
- <span style="color: rgb(0, 0, 0);">**Build custom dashboards** and visualizations for insights</span>
- <span style="color: rgb(0, 0, 0);">**Configure custom alerts** to automate responses</span>
- <span style="color: rgb(0, 0, 0);">**Correlate 1Password events** with data from other systems and services</span>

---

### <span style="color: rgb(53, 152, 219);">**Permissions Required**</span>

<span style="color: rgb(0, 0, 0);">You must be an **Owner** or **Administrator** of your 1Password Business account to configure Events Reporting.</span>

---

### <span style="color: rgb(53, 152, 219);">**Supported Event Types**</span>

#### <span style="color: rgb(0, 0, 0);">**Sign-In Attempts**</span>

<span style="color: rgb(0, 0, 0);">Track authentication activity including:</span>

- <span style="color: rgb(0, 0, 0);">**Username and IP address** of the user</span>
- <span style="color: rgb(0, 0, 0);">**Timestamp** of the sign-in attempt</span>
- <span style="color: rgb(0, 0, 0);">**Success or failure status**</span>
- <span style="color: rgb(0, 0, 0);">**Cause of failure** (for failed attempts)</span>

<span style="color: rgb(0, 0, 0);">These logs help monitor account access patterns and detect unauthorized access attempts.</span>

---

<span style="color: rgb(0, 0, 0);">*<span class="TextRun SCXW71272603 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW71272603 BCX0">If you need further </span><span class="NormalTextRun SCXW71272603 BCX0">assistance</span><span class="NormalTextRun SCXW71272603 BCX0">, kindly contact </span></span><span style="color: rgb(53, 152, 219);">**<span class="TextRun SCXW71272603 BCX0" data-contrast="none" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW71272603 BCX0">support@cytechint.com</span></span>**</span><span class="TextRun SCXW71272603 BCX0" data-contrast="auto" lang="EN-US" xml:lang="EN-US"><span class="NormalTextRun SCXW71272603 BCX0"> for prompt </span><span class="NormalTextRun SCXW71272603 BCX0">assistance</span><span class="NormalTextRun SCXW71272603 BCX0"> and guidance.</span></span><span class="EOP SCXW71272603 BCX0" data-ccp-props="{}"></span>*</span>