insightVM

Compatibility

• This app can only be used with Rapid7 VM API version 3, which corresponds to InsightVM's On-premise version, not its cloud service.

Creating an InsightVM Account

• Create an account in InsightVM for Logpresso Sonar integration.
  • Since InsightVM does not have a separate management feature for API tokens or dedicated API accounts, you must create a standard user account and use it for API calls.

Go to Administration > User Management and configure the account settings as follows:

Basic Settings

Enter the basic login information.

The Username and Password set here will be used when registering the connection profile in Logpresso Sonar.

Role Settings

Select or create a role that includes the following permissions: "View Site Asset Data", "View Group Asset Data", and "Start Unscheduled Scans".

Read-only queries only require "View Site Asset Data" and "View Group Asset Data", while the "Start Unscheduled Scans" permission is required for integrating scanning features.

If set to the Global Administrator Role, you do not need to configure the Site and Asset Group access settings separately.

Site Access Settings

Select the list of sites to be managed by Logpresso Sonar.

Asset Group Access Settings

Select the list of asset groups to be managed by Logpresso Sonar.

Configuring the Connect Profile

Specify the account to be used for API calls in Logpresso Sonar. After installing the app, configure the Logpresso Sonar connect profile.

Descriptions for each field:

• URL: Web console URL starting with "https://" (The web console and API share the same address and port.)
• User: The "Username" of the account created above
• Password: The "Password" of the account created above