Third-party integrations#

Log ingestion#

AWS VPC logs

Enable/configure AWS VPC log data ingestion

AWS VPC logs

Google Cloud VPC logs

Enable/configure GCP VPC log data ingestion

Google Cloud VPC logs

Microsoft Azure logs

Enable/configure Microsoft Azure log data ingestion

Microsoft Azure logs

Oracle Cloud VCN logs

Enable/configure OCI VCN log data ingestion

Oracle Cloud VCN logs

Zscaler ZIA logs

Enable/configure ZIA log data ingestion

Zscaler ZIA logs

Zscaler ZPA logs

Enable/configure ZPA log data ingestion

Zscaler ZPA logs

Network management#

Cisco FireSIGHT

Security management platform integration for enhanced threat visibility

Cisco FireSIGHT

Endace

Packet capture and analysis integration for deep network investigation

Endace

Kubernetes Flow Exporter

Monitoring and visibility for Kubernetes clusters (BETA)

Kubernetes Flow Exporter

SD-WAN log ingestion

Log data ingestion and visibility for software-defined networks

SD-WAN log ingestion

Analytics & SIEM#

Grafana

Enable/configure Grafana integration

Grafana

SolarWinds

Enable/configure SolarWinds integration

SolarWinds

Splunk

Enable/configure Splunk integration

Splunk

STIX-TAXII

Enable/configure STIX-TAXII integration

STIX-TAXII

Enterprise systems#

PRTG

Enable/configure PRTG integration

PRTG

ServiceNow

Enable/configure ServiceNow bi-directional integration

ServiceNow

Username reporting

Enable user correlation via Microsoft AD or Cisco ISE

Username reporting