Sending logs to an external security information and event management (SIEM)

Mon, 01 Jan 0001 00:00:00 +0000

This is an optional step.

The Protegrity infrastructure provides a robust setup for logging and analyzing the logs generated. It might be possible that an existing infrastructure is available for collating and analyzing logs.

In the default setup, the logs are sent from the protectors directly to the Audit Store using the Log Forwarder on the protector. Use the configuration provided in this section to send the logs to the Audit Store and the external SIEM.

Using the Insight Command Line Interface (CLI) on

Sending logs to an external security information and event management (SIEM)