: Syslog and API Client Integration on Data Security
Focus
Focus

Syslog and API Client Integration on Data Security

Table of Contents

Syslog and API Client Integration on
Data Security

Learn how to configure
Data Security
to interface with syslog servers and API clients for monitoring and data collection.
You can configure
Data Security
to interface with syslog servers and API clients. Organizations that have standardized on a specific Security Information and Event Management (SIEM) tool can leverage this feature for monitoring, data collection, and other workflows.
Similar to SaaS Security API on the SaaS Security Console, you can configure
Data Security
on the Cloud Management Console to interface with Syslog servers and API clients. All Syslog and API clients functionalities are the same on both SaaS Security API and
Data Security
. If you have migrated from SaaS Security API to Data Security, all configurations are automatically imported.
Data Security
currently supports one Syslog receiver AND one API client app with access to log data. So, you can use the two protocols and connect SIEM and SOAR software separately. However,
Data Security
does not support using multiple Syslog receivers or multiple API clients concurrently. Alternatively, if you want to use both Splunk and Cortex XSOAR, directly connect Splunk to Cortex XSOAR using the Splunk integration, and create a Client ID and Client Secret for Cortex XSOAR to directly connect to
Data Security
.

Recommended For You