Sending Alerts, Audit Trails, Events, and Logs to Third-Party Systems

Alerts, audit trails, and events can be sent to third-party Security Information and Event Management (SIEM) systems using webhooks or syslog messaging. This allows you to monitor anomalies in third-party systems to perform orchestrated actions and playbooks.

For more information about configuring alerts, audit trails, and events, see the following:

• Splunk Plug-In

• SIEM Connector (11.30)

• Adding a Webhook

• Configuring a Syslog Server

For a list of event codes that you can monitor, see System Messages, Event Strings and Error Codes.