Deployment with Audit Logging Flow to External SIEM
The architecture also supports forwarding logs from protectors to the External SIEM.
The logging flow from protectors to the ESA and the External SIEM is shown in the image below.

Legends
| Component | Active Flow | Failover Flow |
|---|---|---|
| Policy download for v9.1.0.0 Protector | ______ | - - - - - - |
| Package download for v10.0.0 Standard Protector | ______ | - - - - - - |
| Forwarding of Audit Events to External SIEM via ESA | ______ | - - - - - - |
Feedback
Was this page helpful?