---
title: SentinelOne
description: Configure the SentinelOne logs integration with the coralogix_integration Terraform resource, with an example configuration and its parameter table.
url: https://coralogix.com/docs/developer-portal/infrastructure-as-code/terraform-provider/integrations/sentinel-one-collector/
product: ingress
feature: SentinelOne Ingress
feature_id: logs.sentinel-one-ingress
feature_identifier: ingress/logs.sentinel-one-ingress
last_updated: '2026-11-02'
---

# SentinelOne

## Overview

SentinelOne logs provide critical insights into the security of your organization, including endpoint activities, detected threats, user and admin actions. Read these logs to identify patterns, investigate threats and abnormal actions, and understand the context of potential security breaches.

For more information about this integration, [click here](https://coralogix.com/docs/integrations/security/sentinelone.md).

## How to use with Terraform

To deploy this integration using Terraform, you can use the [`coralogix_integration`](https://registry.terraform.io/providers/coralogix/coralogix/latest/docs/resources/integration) resource provided by the Coralogix Terraform provider. Below is an example configuration:

```
resource "coralogix_integration" "sentinel-one-collector" {

  integration_key = "sentinel-one-collector"

  version         = "0.0.1"



  parameters = {

    IntegrationName = "<IntegrationName>"

    ApplicationName = "<ApplicationName>"

    SubsystemName = "SentinelOne"

    Endpoint = "<Endpoint>"

    ApiKey = "<ApiKey>"

  }

}
```

Replace the placeholder values with your actual configuration parameters. Refer to the parameter table below for required fields and their descriptions.

## Revisions

0.0.1

| Name            | Type   | Required | Description                                                          |
| --------------- | ------ | -------- | -------------------------------------------------------------------- |
| ApiKey          | String | Yes      | API token to authenticate and read logs from your SentinelOne tenant |
| ApplicationName | String | Yes      | The application name that the integration will be used with          |
| Endpoint        | String | Yes      | URL of your SentinelOne tenant to connect and read logs from         |
| IntegrationName | String | Yes      |                                                                      |
| SubsystemName   | String | Yes      | The subsystem name that the integration will be used with            |