Supported SIEM Platforms
- Splunk: Splunk HTTP Event Collector (HEC) with Common Information Model (CIM) field mapping.
- Datadog: Datadog Logs and Security Monitoring events.
- Elasticsearch / Kibana: Direct Elasticsearch bulk API ingestion.
- Microsoft Sentinel: Azure Monitor Data Collector API.
- Standard Syslog: RFC 5424 / CEF formatted logs over TLS.