SIEM Connector


Security Information and Event Management (SIEM) connector allows you to send alerts, audit, and events from a CommCell or a company to a third-party application. You can add an SIEM connector for a syslog server and a webhook. In the company level, only audits and alerts can be sent to the third-party application. These audits and alerts in the company level will also be shared with the CommCell level SIEM connectors. The software forwards the logs to the syslog server every 8 minutes. The SIEM Connector takes maximum of 16 minutes to send data to Syslog or Webhook depending upon the time at which data was generated.