Huntress exposes SIEM configuration gaps and adds PSA integration checks

Two November 4 releases give providers clearer evidence about missing audit settings and integration permissions.

Configuration evidence leaves the portal

Huntress has made misconfigured SIEM log sources available through its API, allowing managed providers to retrieve the information already displayed in the portal’s Misconfigured Sources tab. The November 4 changelog says records identify the agent, hostname, organization and whether an issue is unresolved or resolving. They also include the required audit policy, down to its category, name and success or failure settings.

A service workflow, not a repair claim

The endpoint supports pagination and filtering by organization. Those details make the change useful for providers handling multiple customer environments: a configuration finding can be associated with the relevant tenant and tracked in an existing workflow. The announcement describes retrieving configuration evidence; it does not say the endpoint changes the policy or proves that every expected event is arriving. A resolved configuration task and a verified stream of useful telemetry remain separate operational results.

Testing the handoff to the PSA

A second November 4 release adds a Troubleshooting tab to PSA integration configuration pages. Huntress says account administrators can test whether API credentials have the permissions needed for ConnectWise, Autotask, Syncro, HaloPSA and Kaseya BMS integrations. For ConnectWise, Autotask and HaloPSA, a billing-sync dry run reports the outcome without changing the PSA.

Clearer boundaries for service assurance

Taken together, the changes expose two dependencies that can be hidden behind a connected status: the endpoint settings needed to produce logs and the permissions needed for an integration to perform its work. Their value lies in narrowing an investigation before support escalation. Neither release establishes that an MSP has tested an entire customer service, and the Journal has not exercised these features in a live tenant.