Create API Keys for CrowdStrike Falcon Spotlight

To define a CrowdStrike Falcon Spotlight client, you must be designated as Falcon Administrator role to view, create, or modify API clients or keys. Secrets are only shown when a new API Client is created or when it is reset.

When logged into the Falcon UI, navigate to Support > API Clients and Keys. From there, you can view existing clients, add new API clients, or view the audit log. When you click “Add new API Client” you will be prompted to give a descriptive name and select the appropriate API scopes. After you click save, you will be presented with the Client ID and Client Secret. The secret will only be shown once and should be stored in a secure place. If the Client Secret is lost, a reset must be performed, and any applications relying on the Client Secret will need to be updated with the new credentials.