SIEM

This section contains guides on forwarding logs to Security Information and Event Management Systems.

Devo Forward logs to the Devo data analytics platform.
Elastic Cloud A guide to forwarding logs to Elastic Cloud via the Elasticsearch REST API.
Google SecOps A guide to forwarding structured and unstructured logs to Google Chronicle.
Graylog Forward logs to Graylog in Graylog Extended Log Format (GELF).
IBM QRadar A guide to forwarding various log types to IBM QRadar.
LogPoint A guide to forwarding various log types to LogPoint.
McAfee Enterprise Security Manager A guide to forwarding various log types to McAfee ESM.
Micro Focus ArcSight Logger Forward logs to Micro the Focus ArcSight Logger in Common Event Format (CEF).
Microsoft Sentinel Forward security logs to Microsoft Sentinel.
Rapid7 InsightIDR Forward logs to Rapid7 InsightIDR in standard log formats or Universal Event Format (UEF).
RSA NetWitness Forward logs to the RSA NetWitness platform.
Snare Central Forward logs to Snare Central in Snare or Snare syslog format.
SolarWinds Loggly Forward logs to SolarWinds Loggly over TCP or HTTPS.
Splunk Forward logs to Splunk in JSON, XML, syslog, or the Splunk Universal Forwarder format.
Sumo Logic Forward logs to Sumo Logic over TCP or HTTPS.