Admin ConsoleOversight & Visibility

Huntress SIEM

Huntress is a managed security platform that provides threat detection, investigation, and response capabilities. Huntress Managed SIEM centralizes log data from across your environment and can be integrated with Bitwarden, giving security teams unified visibility into password management activity alongside the rest of their security environment.

Requirements

To setup Bitwarden as a log source in Huntress, you must:

  • Have a Bitwarden Teams or Enterprise organization.

  • Have a Huntress organization that includes Managed SIEM.

  • Have administrative access to both Bitwarden and Huntress.

note

Both Bitwarden and Huntress use the term "organization" to describe the entity that ties together users and data. Since you'll need to access both during setup, this document will disambiguate Bitwarden organizations and Huntress organizations where applicable.

Add Bitwarden as a source

To add Bitwarden as a log source to the Huntress Managed SIEM platform:

  1. In Huntress, navigate to SIEM → Source Management.

    Source Management
    Source Management

  2. Select Add Source and, from the dropdown, select Bitwarden.

    Add source
    Add source

  3. Select Add. If you have other pre-existing Bitwarden log sources, they'll also be listed on this page.

  4. Select a configuration method. The method you choose will depend on whether your Bitwarden organization is on a Bitwarden cloud server or a self-hosted server:

    If your Bitwarden organization is on a Bitwarden cloud server (US or EU):

    1. Choose I am using Bitwarden's Cloud Hosting and select Next.

    2. From the Organization dropdown, select a Huntress organization that includes Managed SIEM.

    3. Provide a Name that can be used to identify the integration and, optionally, a Description.

    4. Select Save.

    5. On the following page, take note of the HTTP Event Collector URL and HTTP Event Collector Token. You will need these values in a subsequent step.

      note

      If you click out of this view, you can re-retrieve these values by navigating back to the list of Bitwarden log sources, choosing the source, and selecting the Configure button.

    6. In Bitwarden, open the Admin Console and navigate to the Integrations page and Event management tab.

    7. Scroll down to the Huntress card and select the Connect Huntress button:

      Integrations page
      Integrations page

    8. Copy your HTTP Event Collector URL and HTTP Event Collector Token from Huntress and paste them into the Connect Huntress panel in Bitwarden.

    9. Select Save.