Explains how log destinations interface with SIEMs to manage and analyze security events effectively.
AWS S3 Bucket
Learn about forwarding Multicloud Defense security events and traffic logs to an AWS S3 bucket for storage and analysis. Find the bucket access requirements and profile settings needed for this destination.
Datadog
Learn about forwarding Multicloud Defense security events and traffic logs to Datadog for monitoring and analysis. Find the account, endpoint, and API key information needed to configure this SIEM destination.
GCP Logging
Learn about forwarding Multicloud Defense security events and traffic logs to GCP Logging for storage and analysis. Find the service account role, log name, and event field details needed to configure this destination.
Microsoft Sentinel
Learn about forwarding Multicloud Defense security events and traffic logs to Microsoft Sentinel for monitoring and analysis. Find the Azure Log Analytics workspace, shared key, and log table information needed to configure this SIEM destination.
Splunk
Learn about forwarding Multicloud Defense security events and traffic logs to Splunk for monitoring and analysis. Find the HTTP Event Collector endpoint, token, and index information needed to configure this SIEM destination.
Sumo Logic
Learn about forwarding Multicloud Defense security events and traffic logs to Sumo Logic for monitoring and analysis. Find the account and collector endpoint information needed to configure this SIEM destination.
Syslogs
Learn about forwarding Multicloud Defense security events and traffic logs to a syslog server. Find the supported log categories and profile settings needed to send data to this destination.
Webhook
Learn about forwarding Multicloud Defense logs to a webhook for integration with external services. Find the endpoint, message, batch size, and authentication settings needed to configure the forwarding profile.