Security Information and Event Management (SIEM) connector allows you to send alerts, audit, and events from a CommCell or a company to a third-party application. You can add an SIEM connector for a syslog server and a webhook. In the company level, only audits and alerts can be sent to the third-party application. These audits and alerts in the company level will also be shared with the CommCell level SIEM connectors. The software forwards the logs to the syslog server every 8 minutes. The SIEM Connector takes maximum of 16 minutes to send data to Syslog or Webhook depending upon the time at which data was generated.
Note
When there is any SIEM connector present configured against one of these streaming data types (Alerts, Audit, Events), the same streaming data type cannot be configured on another SIEM connector.