> For the complete documentation index, see [llms.txt](https://help.radiantsecurity.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.radiantsecurity.ai/radiant-connectors/endpoint/trend-micro/trend-vision-one.md).

# Trend Vision One

Connect Trend Vision One to Radiant Security to ingest alerts, observed attack techniques, and search data for AI triage. This guide covers generating the API key in Trend Vision One and adding the data connector in Radiant.

### Prerequisites

* [ ] Admin access to Trend Vision One
* [ ] A user role in Trend Vision One with the permissions listed in [Required permissions](#required-permissions)

### Required permissions

The user role assigned to the API key must grant the following permissions.

| API Category               | App                        | Permissions              |
| -------------------------- | -------------------------- | ------------------------ |
| Alerts / Workbench         | Workbench                  | View, filter, and search |
| Observed Attack Techniques | Observed Attack Techniques | View, filter, and search |
| Search                     | Search                     | View, filter, and search |
| API Keys                   | IAM                        | View                     |

{% hint style="info" %}
The **API Keys: View** permission lets Radiant read API key metadata only, not key values. Radiant uses this metadata to track your credential's expiration date.
{% endhint %}

### Generate the Trend Vision One API key

1. In the Trend Vision One console, go to **Administration** > **API Keys**.
2. Click **Add API key**.
3. In **Name**, enter `RADIANT_SECURITY_API_KEY`.
4. In **Role**, select a role that grants the permissions listed in Required permissions.
5. In **Expiration time**, set how long the key remains valid. The default is one year.
6. Confirm that **Status** is enabled and add a description in **Details** if needed.
7. Click **Add**.
8. Copy the API key and store it in a secure location.

{% hint style="warning" %}
The **Name** value must be exactly `RADIANT_SECURITY_API_KEY`. Radiant uses this name to identify the credential and track its expiration date.
{% endhint %}

### Add the data connector in Radiant Security

1. Log in to [Radiant Security](https://app.radiantsecurity.ai/).
2. From the navigation menu, click **Settings** > **Data Connectors** and click **+ Add Connector**.
3. Search for and select the **Trend Micro Vision One API** option, click **Data** **Feeds**
4. Click on all data feeds to select them and click **Credentials**.
5. Under **Credential Name**, give the credential an identifiable name (e.g. `Trend Vision One Integration`).
6. Enter your **API Base URL** and **API Key**.
7. Click **Add Connector**

### Verify ingestion

After Trend Vision One begins forwarding, confirm alerts and events are reaching Radiant.

1. In Radiant, navigate to [Log Management](https://app.radiantsecurity.ai/logs).
2. Filter by the `rs_connectorType` for each data feed you enabled:

<table><thead><tr><th width="268.16796875">Data feed</th><th>Filter</th></tr></thead><tbody><tr><td>Trend Micro Vision One Alerts</td><td><code>rs_connectorType:"trendmicro_vision_one_alerts"</code></td></tr><tr><td>Trend Micro Vision One Sensor Info</td><td><code>rs_connectorType:"trendmicro_vision_one_sensor_info"</code></td></tr><tr><td>Trend Micro Vision One Query</td><td><code>rs_connectorType:"trendmicro_vision_one_query"</code></td></tr></tbody></table>

3. Confirm recent alerts and events appear for each enabled feed.

{% hint style="info" %}
Allow several minutes for alerts and events to be parsed, indexed, and available for search.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://help.radiantsecurity.ai/radiant-connectors/endpoint/trend-micro/trend-vision-one.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.