---
title: Exabeam Actions
description: "## Actions for Exabeam - ***Send Data to Exabeam***. Sends a custom set of Lucidum data to Exabeam. ## Use Cases Below are the possible use cases for these actions: - If you want to run Lucidum “headless”, you can…"
url: "https://lucidum.io/docs/exabeam-actions/"
updated: "2025-09-22"
category: Actions / List of Actions / E
---

# Exabeam Actions

## Actions for Exabeam

- ***Send Data to Exabeam***. Sends a custom set of Lucidum data to Exabeam.

## Use Cases

Below are the possible use cases for these actions:

- If you want to run Lucidum “headless”, you can send relevant data to Exabeam on a regular schedule.
- You can send normalized, enriched Lucidum data to Exabeam to be indexed, searched, and analyzed.

## Prerequisites

To execute Exabeam actions, you must

Configure a Exabeam API connection beforehand. The required parameters are described in the instructions for creating a Exabeam connector in Lucidum [https://lucidum.io/docs/microsoft-active-directory](https://lucidum.io/docs/bmc-helix-cmdb).

**NOTE**: The specified account should have **read and write**permissions.

## Workflows

- [Creating a new Configuration and a new Action](https://lucidum.io/docs/overview-of-actions#workflow_for_creating_configurations_and_actions_in_lucidum)
- [Cloning an Existing Action](https://lucidum.io/docs/overview-of-actions#workflow_using_clone_to_create_a_new_action)
- [Creating a new Action from the Location Results page](https://lucidum.io/docs/overview-of-actions#alternative_workflow_for_creating_an_action)
- [Editing a Configuration](https://lucidum.io/docs/overview-of-actions#workflow_for_editing_a_configuration)
- [Editing an Action](https://lucidum.io/docs/overview-of-actions#workflow_for_editing_an_action)
- [Viewing Information about an Action](https://lucidum.io/docs/overview-of-actions#viewing_information_about_an_existing_action_and_executing_an_action_on_demand)

## Exabeam Configuration

To create a configuration for Exabeam actions:

![exabeam_configuration.png](https://lucidum.cloud/docs/exabeam_configuration.png)

- ***Configuration Name***. Identifier for the Configuration. This name will appear in the Lucidum Action Center.
- ***URL***. URL of the Exabeam API. For example, https://api.us-west.exabeam.cloud.
- ***Client ID***. Client ID for a Exabeam account with read and write access to the Exabeam API. For details on generating a Client ID and Client Secret, see [https://docs.exabeam.com/en/collectors/all/cloud-collectors-administration-guide/onboard-cloud-collectors/sophos-central-cloud-collector/prerequisites-to-configure-the-sophos-central-cloud-collector.html#UUID-ed0e202c-f7a7-53e5-2501-00e82943ec67_section-idm4597653341710433976921053498](https://docs.exabeam.com/en/collectors/all/cloud-collectors-administration-guide/onboard-cloud-collectors/sophos-central-cloud-collector/prerequisites-to-configure-the-sophos-central-cloud-collector.html#UUID-ed0e202c-f7a7-53e5-2501-00e82943ec67_section-idm4597653341710433976921053498)
- ***Client Secret***. Client ID for a Exabeam account with read and write access to the Exabeam API. For details on generating a Client ID and Client Secret, see [https://docs.exabeam.com/en/collectors/all/cloud-collectors-administration-guide/onboard-cloud-collectors/sophos-central-cloud-collector/prerequisites-to-configure-the-sophos-central-cloud-collector.html#UUID-ed0e202c-f7a7-53e5-2501-00e82943ec67_section-idm4597653341710433976921053498](https://docs.exabeam.com/en/collectors/all/cloud-collectors-administration-guide/onboard-cloud-collectors/sophos-central-cloud-collector/prerequisites-to-configure-the-sophos-central-cloud-collector.html#UUID-ed0e202c-f7a7-53e5-2501-00e82943ec67_section-idm4597653341710433976921053498)
- ***Max # of Records per Payload***. The maximum number of records to send to Exabeam in each action. The default value is “50”.

## Create a New Action

To create an action for Exabeam, contact Lucidum customer care.