Third Party Integrations
Browse the vast catalog of parsers, rules, feeds and more that can enhance your experience with the NetWitness Platform.
Integration Articles Available
| Vendor & Product | Version | Collection Method | Device Class | Category |
|---|---|---|---|---|
| A10 Networks Thunder Series - Implementation Guide | ACOS 2.7.2 P2-SP1 Or Higher | SSL Decryption | Analysis | SSL Decryption |
| A10 Networks Thunder Series - Solutions Brief | SSL Decryption | Analysis | SSL Decryption | |
| Absolute Data and Device Security (DDS) | Absolute DDS Customer Center 5.26+, SIEM Connector 1.1 | Syslog | Analysis | Log Collection |
| Absolute Data and Device Security (DDS) - Implementation Guide | Absolute DDS Customer Center 5.26+, SIEM Connector 1.1 | Syslog | Analysis | Log Collection |
| Acalvio ShadowPlex | 2017.07 | Syslog | Advanced Threat Detection | Log Collection |
| Actiance Vantage | 12.2 | ODBC | Analysis | Log Collection |
| ActivIdentity 4TRESS AAA Server | 6.4.1 | ODBC | Access Control | Log Collection |
| AirMagnet Enterprise | 7.5, 8.5, 10.1 | Syslog | Wireless Devices | Log Collection |
| AirTight Management Console | 7.0, 7.1 U4 | Syslog | Intrusion | Log Collection |
| AirTight Networks SpectraGuard Enterprise | 6.5, 6.6, 6.7 | Syslog | IPS | Log Collection |
| AirTight Networks SpectraGuard Enterprise | 6.5, 6.6, 6.7 | Syslog | IPS | Log Collection |
| Akamai Kona Site Defender | 1 | Syslog | Application Firewall | Log Collection |
| Alcatel-Lucent OmniSwitch | 6600, 6850, 9700 | Syslog, SNMP | Switch | Log Collection |
| ALTOR (A Juniper Networks Company) Security Suite | 4 | Syslog | Firewall | Log Collection |
| ALTOR (A Juniper Networks Company) Security Suite | 4 | Syslog | Firewall | Log Collection |
| Amazon AWS AppFabric | N/A | Plugin | Cloud | Log Collection |
| Amazon AWS Cloudwatch | API v1.0 | Plugin | Cloud | Log Collection |
| Amazon AWS Detective | API v1.0 | Plugin | Cloud | Log Collection |
| Amazon AWS GuardDuty | All | Plugin | Cloud | Log Collection |
| Amazon AWS Security Hub | API v1.0 | Plugin | Cloud | Log Collection |
| Amazon S3 Universal Connector | API v1.0 | Plugin | Cloud | Log Collection |
| Anomali Link | API v1.0 | Plugin | Cloud | Log Collection |
| Anomali STAXX | Threat Intel | |||
| Anomali ThreatStream Intelligence Platform | Threat Intel | |||
| Apache Tomcat Server Event Source Configuration Guide | Log Collection | |||
| APCON Inc. IntellaFlex Series 3000 | Network TAP | |||
| Apcon IntellaPatch Series 3000 Network Monitoring Switch | 4.34.2 | Syslog | Switch | Log Collection |
| Arbor Networks Peakflow SP5 | 5.X, 9.X | Syslog | IPS | Log Collection |
| Arbor Networks Peakflow X | 4.1 | Syslog | IPS | Log Collection |
| Array Networks SPX Series Universal Access Controllers | 8.4.6 | Syslog | VPN | Log Collection |
| Array Networks SPX Series Universal Access Controllers | 8.4.6 | Syslog | VPN | Log Collection |
| Aruba Networks AirWave | 6.3.x, 6.4.x, 7.5.x | Syslog | Wireless Devices | Log Collection |
| Aruba Networks ClearPass Policy Manager | 5.2, 6.x | Syslog | Access Control | Log Collection |
| Aruba Networks Mobility Controller | ArubaOS 2.5.4.0, 3.4, 6.x, 8.10.0.7 | Syslog | Wireless Devices | Log Collection |
| AttackIQ Platform | Dec-20 | Analysis | Log Collection | |
| Attivo ThreatMatrix Platform | 4.x | Syslog | Analysis | Log Collection |
| Avecto Privilege Guard | 3.5 | Windows | Access Control | Log Collection |
| Avocent IP KVM | Dell PowerEdge 2161DS-2 | SNMP | Network | Log Collection |
| Barracuda Spam Firewall | 3.4, 3.5, 6.1.x, 8.x | Syslog | Antivirus | Log Collection |
| Barracuda Web Application Firewall | Firmware: 7.4.0, 7.8.0, 7.9.2, 8.x, 9.x | Syslog | Application Firewall | Log Collection |
| Bayshore Networks SingleKey | 6.3 | Syslog | Analysis | Log Collection |
| BeyondTrust Powerbroker Endpoint Protection (formerly eEye Blink Endpoint Protection) | 4.x | SNMP | Intrusion | Log Collection |
| BeyondTrust PowerBroker Servers | 7, 8 | Syslog | Access Control | Log Collection |
| BeyondTrust PowerBroker Servers | ||||
| BeyondTrust Retina Network Security Scanner (formerly eEye Retina Network Security Scanner) | 5.1 | Syslog, SNMP | IDS | Log Collection |
| BigFix Enterprise Suite | 7.2 | JDBC/Logstash | Configuration Management | Log Collection |
| BigFix Enterprise Suite | 7.2 | ODBC | Configuration Management | Log Collection |
| Bind DNS | Bind: 9.x, 11 | Syslog | UNIX | Log Collection |
| Bit9 Security Platform | 6.0.2, 7.0, 7.2 | Syslog, ODBC | Application Firewall | Log Collection |
| Blackberry Ltd Enterprise Server | 5.x | File | Messaging | Log Collection |
| Blue Coat Systems Inc. Director (part of Broadcom Inc.) | 5.5.1.1, 5.5.2.3, 6.1.1.1 | Syslog | Configuration Management | Log Collection |
| Blue Coat Systems Inc. ProxyAV (part of Broadcom Inc.) | 3.3.1.2, 3.5.1.1 | Syslog, SNMP | Antivirus | Log Collection |
| Blue Coat Systems Inc. ProxySG SGOS (part of Broadcom Inc.) | 4.x, 5.x, 6.x, 7.x | Syslog, File | Web Logs | Log Collection |
| Blue Coat Systems Inc. SSL Visibility Appliance (part of Broadcom Inc.) | SSL Decryption | |||
| BlueCat | Adonis 7.0 | Syslog | System | Log Collection |
| BluVector Cortex | 3.1 | Syslog | Analysis | Log Collection |
| BMC Remedy IT Service Management | 7.6.04 | ODBC | Configuration Management | Log Collection |
| Brocade FastIron Switch | FGS624P- STK | Syslog | Switch | Log Collection |
| CA ACF2 (formerly IBM Mainframe ACF2) | Supported Platforms : z/OS v1.9, v1.10, v1.11, v1.12, and v1.13 | |||
| CA ACF2 (formerly IBM Mainframe ACF2) | Versions : r14 and higher | FIle | Mainframe | Log Collection |
| CA Integrated Threat Management | r8, r8.1 | SNMP | Antivirus | Log Collection |
| CA SiteMinder | ||||
| CA SiteMinder | r12 | File | Access Control | Log Collection |
| CA Top Secret | z/OS | File | Mainframe | Log Collection |
| CA Top Secret | ||||
| Carbon Black Cb Response | N/A | Syslog | System | Log Collection |
| Carbon Black Cb Response | ||||
| Check Point GAiA | R77.20 | Syslog | UNIX | Log Collection |
| Check Point IPSO (formerly Nokia IPSO) | 3.6, 3.7, 3.8, 3.9, 6.2 | Syslog | UNIX | Log Collection |
| Check Point Security Suite (IPS-1) | R76, R77.x, R80.x, R81.10 | Check Point, Syslog | Firewall | Log Collection |
| Check Point SPLAT OS | R75, 77.10 | Syslog | UNIX | Log Collection |
| Cimcor CimTrak | 2.0.6.11 | Syslog | Intrusion | Log Collection |
| Cimcor CimTrak | ||||
| Cisco 3300 Series Mobility Services Engine | 5.2.91.0, 6.0.97.0, 7.0.105.0 | Syslog | Wireless Devices | Log Collection |
| Cisco Adaptive Security Appliance (ASA) | 7.x, 8.x, 9.x, 11.13 | Syslog | Firewall | Log Collection |
| Cisco Advanced Malware Protection (AMP) for Endpoints | All | Plugin | Cloud | Log Collection |
| Cisco Aggregation Services Router | 3.3 | Syslog | Router | Log Collection |
| Cisco Aironet AP (Wireless Access Point) | IOS 12.2 | Syslog | Router | Log Collection |
| Cisco Application Control Engine | 4710 | Syslog | Application Delivery | Log Collection |
| Cisco ASA Security Services Module | 4.x. 5.0, 5.1, 6.0, 6.1, 6.2, 7.0, 7.1.1 | SDEE | IDS | Log Collection |
| Cisco Catalyst Switch | Cisco Catalyst 6500, Cisco Catalyst 2960-CX | Syslog | Router | Log Collection |
| Cisco Firepower System Event Streamer ( eStreamer) | 6.x, 7.x | Syslog | Access Control | Log Collection |
| Cisco Firewall Service Module | 4.1(5) | Syslog | Firewall | Log Collection |
| Cisco Identity Services Engine (ISE) | 1.0, 1.1, 1.3, 1.4, 2.x | Syslog | Access Control | Log Collection |
| Cisco IOS | IOS 12.4, 15.x | Syslog | Router | Log Collection |
| Cisco IronPort Email Security Appliance | 5.7.0, 7.1.3, 8.0.1, 8.5.x, 11.x | File, Syslog | Application Firewall | Log Collection |
| Cisco Meraki | MX60, GA 12.26 | Syslog | Configuration Management | Log Collection |
| Cisco Network Admission Control (NAC) | 4.7, 4.9 | Syslog | Access Control | Log Collection |
| Cisco Nexus | 1000V, 5000V and 7000V | Syslog | Switch | Log Collection |
| Cisco Prime Infrastructure & Wireless Control System | Prime Infrastructure: 1.1, 1.2, 2.0, 2.1 | Configuration Management | Log Collection | |
| Cisco Secure Access Control Server (ACS) | Software only: 4.2 | Syslog | Access Control | Log Collection |
| Cisco Secure Access Control Server (ACS) Express | 5 | Syslog | Access Control | Log Collection |
| Cisco Secure IDS or IPS | 4.x, 5.0, 5.1, 6.0, 6.1, 6.2, 7.x; Signature Engines: E1, E2, E3, E4 | SDEE | IDS | Log Collection |
| Cisco Secure IDS or IPS Event Source Configuration Guide | 4.x. 5.0, 5.1, 6.0, 6.1, 6.2, 7.0, 7.1.1 | SDEE | IDS | Log Collection |
| Cisco Security Agent | 4.0, 5.1, 6.0 | ODBC, SNMP | IDS | Log Collection |
| Cisco Sourcefire Defense Center / SNORT | 4.x, 5.x, 6.x | Syslog | IDS | Log Collection |
| Cisco ThreatGRID | Threat Intel | |||
| Cisco Umbrella | Schema Version 5 | Plugin | Cloud | Log Collection |
| Cisco Unified Computing System Manager | 1.0 (2d) | Syslog | Configuration Management | Log Collection |
| Cisco Virtual Security Gateway | 4.2(1)VSG(1) | Syslog | Switch | Log Collection |
| Cisco Wireless LAN Controller (WLC) (2100 Series, 4400 Series, and 9800 Series) | 5.2.157.0, 6.0.188, 7.0.9, 8.0, 8.x, 17.03.03 | Syslog, SNMP | Wireless Devices | Log Collection |
| CiscoWorks LAN Management Solution | 3.2, 4.0 | ODBC | Configuration Management | Log Collection |
| Citrix Access Gateway | 4.5, 4.6, 5.0 | Syslog, File | VPN | Log Collection |
| Citrix NetScaler | 9.1, 9.2, 9.3, 10.0, 10.1, 10.5, 11.x, 13.x, 14.x | Syslog | Application Firewall | Log Collection |
| Citrix XenApp | 5 (for Windows Server 2003), 6, 6.5, 7.x | ODBC | Virtualization | Log Collection |
| Citrix XenMobile MDM (formerly Zenprise MobileManager) | XenMobile Server 10.x | Syslog, File | Configuration Management | Log Collection |
| Claroty Platform | 2.0, 2.1 | Syslog | Analysis | Log Collection |
| Clearswift SECURE Gateway Suite | Web Gateway: 3.0 | Syslog | Application Servers | Log Collection |
| Clearswift SECURE Gateway Suite | Email Gateway: 3.6 | |||
| Cloudera Navigator | 4.8, 5.x | Syslog | Access Control | Log Collection |
| CloudLink SecureVSA | 3 | Syslog | Access Control | Log Collection |
| Cofense Intelligence (formerly PhishMe) | Threat Intel | |||
| CoreTrace Bouncer | ||||
| CoreTrace Bouncer | 6.0.1 | Syslog | Application Firewall | Log Collection |
| CorreLog, Inc. SIEM Agent for IBM z/OS (part of BMC Software, Inc.) | 5.5.1 z/OS | Syslog | Mainframe | Log Collection |
| cPacket Networks CVU Family | Network TAP | |||
| Crossbeam C-Series | 4.x, 5.x, 6.x | Syslog | UNIX | Log Collection |
| CrowdStrike Falcon | N/A | Syslog | Endpoint | Log Collection |
| CrowdStrike Falcon | ||||
| CryptoniteNXT | CEF | Log Collection | ||
| Cuckoo Sandbox | Other | |||
| Custom JDBC | Any version of Oracle or ibmdb2 | Logstash | Database | Log Collection |
| CyberArk Account Security and Identity Management | 7.x, 8.x, 9.x, 10.x, 12.1 | Syslog | Access Control | Log Collection |
| CyberArk Account Security and Identity Management | ||||
| CyberArk Account Security and Identity Management | ||||
| CyberArk Privileged Threat Analytics | 2.6.3.1 | Syslog | Access Control | Log Collection |
| Cyberoam UTM | 10.04.3 | Syslog | Firewall | Log Collection |
| CyberSponse CyOps | Orchestration & Automation | |||
| Cylance Protect | 1.x | Syslog | Antivirus | Log Collection |
| Cymulate Integration | ||||
| Cyware Integration | ||||
| Damballa Failsafe | 5.0.2, 6.2.0 | Syslog | Antivirus | Log Collection |
| DataSunrise Database Security Suite | 3.7 | Syslog | Analysis | Log Collection |
| DeepInspect | 2.1 | Syslog | ICS | Log Collection |
| Dell EMC Avamar | 4.1, 6.0, 7.0 | ODBC, Syslog | Storage | Log Collection |
| Dell EMC Celerra (also known as Dell EMC Control Station, Blades, DataMover, NSX) | 7.0, 7.1 | SNMP | Storage | Log Collection |
| Dell EMC Data Domain | 5.1.0.4 | Syslog | Storage | Log Collection |
| Dell EMC Data Protection Advisor | 5.6 | ODBC | Analysis | Log Collection |
| Dell EMC Greenplum Database | 4 | FIle | Database | Log Collection |
| Dell EMC Greenplum HD | 1.2 | File | Storage | Log Collection |
| Dell EMC Ionix Unified Infrastructure Manager | 1.0, 2.1, 3.0, 3.1 | Syslog, File, ODBC | Configuration Management | Log Collection |
| Dell EMC Isilon | 6.5.3.32, 6.5.5.7.x, 8.x | File, Syslog | Storage | Log Collection |
| Dell EMC NetWorker | 7.6 SP2 | File | Storage | Log Collection |
| Dell EMC Secure Remote Support (ESRS) | 2 | Syslog | Access Control | Log Collection |
| Dell EMC Symmetrix Solutions Enabler | 6.4, 6.5.3, 7.0, 7.1, 7.3.0.1, 7.6.1 | Syslog, File | Storage | Log Collection |
| Dell EMC VNX (formerly Clariion Navisphere) | Navisphere 6.28 and Unisphere 1.1 | SNMP | Storage | Log Collection |
| Dell EMC Voyence | 4.0.1 | SNMP | Access Control | Log Collection |
| Dell EMC VPLEX | all | File | Storage | Log Collection |
| Dell iDRAC | DRAC 5, iDrac 6, iDRAC 9.x | SNMP, Syslog | Access Control | Log Collection |
| Dell PowerConnect 5324 Switch | 1.0.0.47 | Syslog | Switch | Log Collection |
| Demisto Enterprise | Orchestration & Automation | |||
| DenyAll WAF (formerly Bee Ware Web Application Firewall) | 5.x | Syslog | Application Firewall | Log Collection |
| DFLabs IncMan | 4.5+ | Orchestration & Automation | ||
| Digital Guardian | 6.1 | Syslog | DLP | Log Collection |
| Digital Guardian | ||||
| Dropbox | ||||
| Dropbox | API v2.0 | Plugin | Cloud | Log Collection |
| EclecticIQ Threat Intelligence Platform | Threat Intel | |||
| EMC Fabric OS | 6.1, 6.2 | Syslog | Switch | Log Collection |
| Endgame | 2.5.4 | Syslog | System | Log Collection |
| Enforcive Enterprise Security (part of Precisely) | 7.x | Syslog | Access Control | Log Collection |
| Entrust Identity Guard | 10.1 | Syslog | Access Control | Log Collection |
| EOL Third Party Integrations : amazonkinesis | EOL Third Party Integrations | |||
| EOL Third Party Integrations : amazonvpc | EOL Third Party Integrations | |||
| EOL Third Party Integrations : awscloudtrail | EOL Third Party Integrations | |||
| EOL Third Party Integrations : azure_ad_audit | EOL Third Party Integrations | |||
| EOL Third Party Integrations : azure_ad_signin | EOL Third Party Integrations | |||
| EOL Third Party Integrations : ciscoumbrella | EOL Third Party Integrations | |||
| EOL Third Party Integrations : msazuregraph_security | EOL Third Party Integrations | |||
| EOL Third Party Integrations : netskope | EOL Third Party Integrations | |||
| ESET Remote Administrator | ||||
| ESET Remote Administrator | 4.0, 5.0 | ODBC | Antivirus | Log Collection |
| Evidian Authentication Manager | 9.x, 10.x | ODBC | Access Control | Log Collection |
| Exabeam Advanced Analytics | 3 | Syslog | Analysis | Log Collection |
| Extreme Networks Dragon IPS (formerly Enterasys Dragon) | 5.x, 6.x, 7.2, 7.4 | SNMP | IDS | Log Collection |
| Extreme Networks Switch (formerly Enterasys Switch | S-Series | Syslog | Switch | Log Collection |
| F-Secure | 5.x | Syslog, Windows | Antivirus | Log Collection |
| F5 BIG-IP Access Policy Manager | 10.2.0, 11.4 HF4, 11.5.2 HF1, 15.x | Syslog | Access Control | Log Collection |
| F5 BIG-IP Advanced Firewall Manager | 11.5 | Syslog | Firewall | Log Collection |
| F5 BIG-IP Application Security Manager | 10.2.0, 11.2, 11.5.x, 11.6,13.x, 14.x | Syslog | Application Firewall | Log Collection |
| F5 BIG-IP Local Traffic Manager | 9.4, 10.2.0, 11.x, 12.x, 13.x, 14.x, 15.x | Syslog | Switch | Log Collection |
| F5 Firepass SSL VPN | 5.5-20051019, 7.0.1 | Syslog | VPN | Log Collection |
| F5 SSL Orchestrator | SSL Decryption | |||
| FairWarning Privacy Monitoring | 2.9.2, 4.x | File | Analysis | Log Collection |
| FireEye Endpoint Security (FireEye HX) | 5.1.x | Logstash | IPS | Log Collection |
| FireEye Mandiant Security Validation (formerly Verodin) | Other | |||
| FireEye Web Malware Protection System | 6.x, 7.x, 8.x, 9.x | Syslog | Malware | Log Collection |
| FluentD | 1.15.1 | Log Collection | ||
| Forcepoint DLP (formerly Websense Data Security) | 7.x, 8.x | Syslog | DLP | Log Collection |
| Forcepoint Email Security) | 8.x | Syslog | Antivirus | Log Collection |
| Forcepoint Web Security (formerly Websense Web Security) | 5.5, 6.3, 7.0, 7.1, 7.5, 7.6, 7.7, 7.8.1, 7.8.4, 8.x | SNMP, ODBC (7.5, 7.6, 7.7), (Syslog for 7.7 and later) | Web Logs | Log Collection |
| ForeScout CounterACT | 6.3.4.0, 7.x, 8.x | Syslog | Access Control | Log Collection |
| Fortinet FortiAnalyzer | 5.x, 6.x, 7.x | Syslog | Firewall | Log Collection |
| Fortinet Forticlient Endpoint Security | 4.x; 7.x | Syslog | Firewall | Log Collection |
| Fortinet FortiGate | 2.8, 3.0, 4.0 MR1, 4.0 MR2, 5.x, 6.x, 7.4.4 | Syslog | Firewall | Log Collection |
| Fortinet FortiMail | 4.0, 5.2, 6.x | Syslog | Application Firewall | Log Collection |
| Fortinet Manager | 5.x, 6.x, 7.x | Syslog | Firewall | Log Collection |
| Fox Technologies Server Control | ||||
| Fox Technologies Server Control | 6.5, 6.6 | Syslog | Access Control | Log Collection |
| Free BSD | 5.x | Syslog | UNIX | Log Collection |
| General Electric (GE) Centricity Enterprise Archive | 4 | ODBC | Document | Log Collection |
| General Electric (GE) Centricity PACS-IW | 3.7.3 | ODBC | Document | Log Collection |
| Gigamon GigaSECURE | Network TAP | |||
| Gigamon GigaSECURE OpenStack | Network TAP | |||
| Gigamon GigaVUE FM Series | Network TAP | |||
| Gigamon SSL Solution | SSL Decryption | |||
| Git | 1.7.6 | File | CMS | Log Collection |
| GitHub Enterprise | 2.8.x | Syslog | CMS | Log Collection |
| GlobalSCAPE Enhanced File Transfer (EFT) Server | all versions up to 6.3.8 | File | Web Logs | Log Collection |
| Google Cloud Platform (GCP) | API v1.0 | Plugin | Cloud | Log Collection |
| Google Workspace (Formerly Google G Suite) | API v1.0 | Plugin | Cloud | Log Collection |
| Gurucul Risk Analytics | Other | |||
| HelpSystems PowerTech Interact | 3 | Syslog | Analysis | Log Collection |
| HelpSystems PowerTech Interact | ||||
| Hewlett Packard Integrity NonStop Server | All NonStop OS releases supported by HP | Syslog | Analysis | Log Collection |
| Hewlett Packard OpenVMS | all | File | Midrange | Log Collection |
| Hewlett Packard ProCurve Switch | series 2600, 2800, 5300, 7510 | Syslog | Switch | Log Collection |
| Hewlett Packard UNIX | 11.X, C2 v11.X | Syslog | UNIX | Log Collection |
| Huawei VRP | 5.x, 6.x, 8.x | Syslog | Router | Log Collection |
| HyTrust CloudControl (formerly HyTrust Appliance) | Appliance: 2.0.10264, 2.5.1, 3.0.2, 3.6 | Syslog | Access Control | Log Collection |
| IBM AIX | 5L (Security and Authentication messages only), 6.1, 7.x | Syslog | UNIX | Log Collection |
| IBM DB2 | 7, 8, 8.1, 9.1, 9.5, 9.7, 10.x | Logstash | Database | Log Collection |
| IBM DB2 Universal Database | 7, 8, 8.1, 9.1, 9.5, 9.7, 10.x, 11.5.6 (File Collection for AIX) | File, ODBC | Database | Log Collection |
| IBM Domino | 8.5, 9.x | SNMP | Mail Servers | Log Collection |
| IBM Guardium SQL Guard | 7, 8.0.2, 9.5.x | Syslog | Firewall | Log Collection |
| IBM ISS SiteProtector | 2.0 SP6.1, SP7.0, SP8.0, SP8.1, SP9.0 | ODBC | IDS | Log Collection |
| IBM Mainframe ICSF | Mainframe z/OS v1.9, v1.10, v1.11, v1.12 and v1.13 | File | Mainframe | Log Collection |
| IBM Mainframe IDMS | Mainframe z/OS v1.9, v1.10, v1.11, v1.12 and v1.13 | File | Mainframe | Log Collection |
| IBM Mainframe IMS | Mainframe z/OS v1.9, v1.10, v1.11, v1.12 and v1.13 | File | Mainframe | Log Collection |
| IBM Mainframe IPSec | Mainframe z/OS v1.9, v1.10, v1.11, v1.12 and v1.13 | File | Mainframe | Log Collection |
| IBM Mainframe RACF | Mainframe z/OS v1.9, v1.10, v1.11, v1.12, v1.13, v2.1 and v2.2 | File | Mainframe | Log Collection |
| IBM Mainframe Syslog and Hardcopy Log Facility | Mainframe z/OS v1.9, v1.10, v1.11, v1.12, v1.13, 2.x | File | Mainframe | Log Collection |
| IBM MQ (formerly branded as WebSphere MQ) | 7.0.1 | File | Messaging | Log Collection |
| IBM Tivoli Access Manager ESSO | 8.0.1 | ODBC | Access Control | Log Collection |
| IBM Tivoli Access Manager WebSEAL | 6.0, 7.x, 9.x | File, Syslog | Access Control | Log Collection |
| IBM Tivoli Identity Manager | 5.1 | ODBC | Access Control | Log Collection |
| IBM WebSphere | 6.0.0.1, 7.0.0.9, 8.0, 8.5 | File | Application Servers | Log Collection |
| IBM WebSphere DataPower | 3.8.1, 7.x | Syslog | System | Log Collection |
| Imperva SecureSphere | 6, 7, 8, 8.5, 9.0, 9.5,10.0, | Syslog | Application Firewall | Log Collection |
| Infoblox NIOS | 5.1, 6.4.5, 8.x | Syslog | System | Log Collection |
| Interface Masters Niagara 2299 | Network TAP | |||
| Interface Masters Niagara 4272 | Network TAP | |||
| Intersect Alliance Snare for Linux | 3.7 and later | Syslog | UNIX | Log Collection |
| Invincea Threat Data Server | 2.6 | Syslog | Antivirus | Log Collection |
| IPFIX | NetFlow v10 | Logstash | Switch | Log Collection |
| Ixia CloudLens (part of Keysight) | Network TAP | |||
| Ixia Phantom vTap (part of Keysight) | Network TAP | |||
| Ixia Vision ONE (part of Keysight) | Network TAP | |||
| J4Care Healthcare Connector | N/A | Syslog | Document | Log Collection |
| Jamf Protect | API v1.0 | Plugin | Cloud | Log Collection |
| JBoss Application Server | Application Server: 4.2, 5.0, 7.0 | File, Syslog | Application Servers | Log Collection |
| Jenkins | 1.58, 1.8.x, 2.x | Syslog | Application Servers | Log Collection |
| Juniper Networks Intrusion Detection and Prevention (IDP) | 3.0, 3.1, 3.2, 4.0, 4.1, 5.0 | Syslog, File | IDP | Log Collection |
| Juniper Networks JUNOS | 6.1, JUNOS 9.4, 9.6, 10.0, 10.3, 10.4, 11.1, 11.2, 11.4, 12.1, 17.x | Syslog | Router | Log Collection |
| Juniper Networks NetScreen Firewall | 5.1, 5.3, 5.4, 6.x | Syslog | Firewall | Log Collection |
| Juniper Networks NetScreen ScreenOS | 5.1, 5.3, 5.4, 6.x | Syslog | Firewall | Log Collection |
| Juniper Networks NetScreen-Security Manager | 2006, 2007, 2010, 2011, 2012 | Syslog, File | Configuration Management | Log Collection |
| Juniper Networks Unified Access Control | 2.2, 3.1, 4.5 | Syslog | Access Control | Log Collection |
| Juniper Networks Wireless LAN Controller | 7.6.1 | Syslog | Wireless Devices | Log Collection |
| Juniper Steel-Belted Radius | 5.4, 6.x | File | Access Control | Log Collection |
| Kaspersky Anti-Virus | Kaspersky Security Center 9.0, 10.x,11.x, 14.0 Kaspersky Administration Kit 8.0 Kaspersky Anti-Virus for Microsoft ISA Server 2004 Enterprise Edition and 2006 Enterprise Edition | ODBC, File | Antivirus | Log Collection |
| Kaspersky CyberTrace (formerly Threat Feed Service) | Threat Intel | |||
| Kaspersky Threat Intelligence Portal | Threat Intel | |||
| Kernel Based Virtual Machine (KVM) | 2.6.32-220 | File | Virtualization | Log Collection |
| Kubernetes | 1.18 | Logstash | Configuration Management | Log Collection |
| Lancope StealthWatch | 5.5, 5.6, 5.9, 5.10, 6.0 | Syslog | IDS | Log Collection |
| LANDesk Management Suite | 9.0 Service Pack 2, 9.5 | ODBC | Configuration Management | Log Collection |
| Lieberman Enterprise Random Password Manager (ERPM) | 4.83.6 | Syslog | Application Servers | Log Collection |
| Lieberman Enterprise Random Password Manager (ERPM) | ||||
| Linux (AlmaLinux) | Syslog | UNIX | Log Collection | |
| Linux (CentOS) | 6 | Syslog | UNIX | Log Collection |
| Linux (Debian GNU) | 3.1, 4.0 | Syslog | UNIX | Log Collection |
| Linux (Novell SuSE) | 9, 10, 10.2, 11, 12.x, 15 | Syslog | UNIX | Log Collection |
| Linux (Red Hat/RHEL) | Syslog | UNIX | Log Collection | |
| LogRhythm Platform | Other | |||
| Lumension Endpoint Management and Security Suite | 7 | ODBC | Configuration Management | Log Collection |
| M86 Secure Web Gateway (part of Trustwave) | ||||
| M86 Secure Web Gateway (part of Trustwave) | 10.1, 10.2 | Syslog | Application Firewall | Log Collection |
| ManageEngine Netflow Analyzer | 8.0, 9.5 | ODBC | Analysis | Log Collection |
| MapR Converged Data Platform (part of Hewlett Packard Enterprise) | Other | |||
| McAfee Data Loss Prevention Endpoint | 2.2, 3.0, 9.0, 9.1, 9.2, 9.3, 9.4.x, 10.x | JDBC/Logstash | DLP | Log Collection |
| McAfee Data Loss Prevention Endpoint | 2.2, 3.0, 9.0, 9.1, 9.2, 9.3, 9.4.x, 10.x | ODBC | DLP | Log Collection |
| McAfee Database Security | 4.2, 5.x | Syslog | Application Firewall | Log Collection |
| McAfee Email Gateway (formerly CipherTrust IronMail) | 5.5, 7.x | Syslog, SNMP | Antivirus | Log Collection |
| McAfee Endpoint Encryption | 5.2.2. 5.2.12 | File | Access Control | Log Collection |
| McAfee Endpoint Security | 10.x | JDBC/Logstash | Antivirus | Log Collection |
| McAfee Endpoint Security | 10.x | ODBC | Antivirus | Log Collection |
| McAfee Firewall Enterprise | 6.1.1.x, 6.1.2.x, 7.0.0.x, 8.0, 8.x | Syslog | Firewall | Log Collection |
| McAfee Host Intrusion Prevention (aka Entercept) | 6.0.1 supported on McAfee ePolicy Orchestrator 3.6.0, 3.6.1 7.0, 8.0 supported on McAfee ePolicy Orchestrator 4.0 | ODBC | IDS | Log Collection |
| McAfee Integrity Control | 5.0.2, 5.1.0, 6.x | ODBC | Configuration Management | Log Collection |
| McAfee Network Access Control | 3.1.1 | ODBC | Access Control | Log Collection |
| McAfee Network Data Loss Prevention (Reconnex) | 8.6, 9.x | ODBC, Syslog | DLP | Log Collection |
| McAfee Network Security Platform | 2.1, 3.1, 4.1, 5.1, 6.1, 7.1, 8.x, 9.x | Syslog, ODBC (for version 5.1) | IDS | Log Collection |
| McAfee Policy Auditor | 5.2, 6.01, 6.2 | ODBC & Logstash | Configuration Management | Log Collection |
| McAfee Security for Microsoft Exchange | 8.x | ODBC | Antivirus | Log Collection |
| McAfee VirusScan Enterprise | 8.x | ODBC & Logstash | Antivirus | Log Collection |
| McAfee Vulnerability Manager | 5.0, 6.5.1, 6.8, 7.0, 7.5 | ODBC & Logstash | IDS | Log Collection |
| McKesson Horizon Patient Folder | 15 | ODBC & Logstash | Document | Log Collection |
| Menlo Security Event Source Configuration Guide | API v2.0 | Plugin | Cloud | Log Collection |
| Microdasys XML Security Gateway | 1.1.0 | File | Application Firewall | Log Collection |
| Microsoft Audit Collection Services | 2007 SP1 | ODBC & Logstash | Windows Hosts | Log Collection |
| Microsoft Azure Graph Event Source Log Configuration Guide | Log Collection | Plugin | ||
| Microsoft Azure Log Analytics Workspace | All | Plugin | Cloud | Log Collection |
| Microsoft Azure NSG | Plugin | Cloud | Log Collection | |
| Microsoft Azure via Azure Audit | All | Plugin | Cloud | Log Collection |
| Microsoft Dynamic Host Configuration Protocol Server | File | Host.Application Servers | Log Collection | |
| Microsoft Exchange Server | 2003, 2007, 2010, 2013, 2016, 2019 | File, Windows | Mail Servers | Log Collection |
| Microsoft Forefront Threat Management Gateway | Beta, ISA 2006, TMG 2010 | File, ODBC | Firewall | Log Collection |
| Microsoft Forefront Unified Access Gateway | 2010 | Syslog, ODBC | VPN | Log Collection |
| Microsoft Internet Information Services (IIS) | 5.x, 6.x, 7.x, 8.x, 10.x | File | Web Logs | Log Collection |
| Microsoft Internet Security and Acceleration (ISA) Server | 2000, 2004, 2006 | File, Windows | Web Logs | Log Collection |
| Microsoft Network Access Protection | 1.1 | ODBC & Logstash | Access Control | Log Collection |
| Microsoft Network Policy Server (NPS) | 3.2, 4.0 | File, Windows | Access Control | Log Collection |
| Microsoft Office 365 | ||||
| Microsoft Office 365 | API v1.0 | Plugin | Cloud | Log Collection |
| Microsoft SharePoint Server | 2007, 2010, 2013, 2016 | Windows | Storage | Log Collection |
| Microsoft SQL | File and Windows Event Logs | Database | Log Collection | |
| Microsoft SQL (JDBC) | Logstash | Database | Log Collection | |
| Microsoft SQL Server | ||||
| Microsoft SQL Server | 2000, 2005, 2008, 2012, 2014, 2016, 2019, 2022 and MS SQL Express | File, Windows | Database | Log Collection |
| Microsoft System Center Configuration Manager | 2007, 2012 | Windows | Configuration Management | Log Collection |
| Microsoft System Center Operations Manager | 2005, 2007, 2012, 2012 R2 | Windows | Configuration Management | Log Collection |
| Microsoft Team Foundation Server (TFS) | Microsoft TFS 2018 | ODBC & Logstash | CMS | Log Collection |
| Microsoft Windows (Legacy) | Microsoft Windows Server versions 2003 and earlier | Windows Legacy | Windows Hosts | Log Collection |
| Microsoft Windows (via WinRM) | Server 2008, 2008 R2, 2012, 2012 R2 Data Center Edition, 2016, 2019 | Windows 7, 8 and 10 | Windows | Windows Hosts | Log Collection |
| Microsoft Windows DNS | 2008, 2012, 2016, 2019 | Syslog, File | Windows Hosts | Log Collection |
| Microsoft Windows Server Update Service | 3.0 SP 2 | ODBC & Logstash | Configuration Management | Log Collection |
| Morphisec Endpoint Threat Prevention | 2.7 | Syslog | Analysis | Log Collection |
| nCircle Configuration Compliance Manager | 5.1 | Syslog | Configuration Management | Log Collection |
| NETASQ Unified Manager | 8.1.3, 9.0.2, 9.0.3.2 | Syslog | Firewall | Log Collection |
| NetClarity NACwall | ||||
| NetClarity NACwall | 8.0.6 | Syslog | Access Control | Log Collection |
| Netflow | 5, 9 | Netflow | Analysis | Log Collection |
| Netskope | API v2 | Plugin | Cloud | Log Collection |
| Network Critical SmartNAx Series | Network TAP | |||
| NFR NIDS | 3.x, 4.x, 5.x | Syslog | IDS | Log Collection |
| Nginx | 1,22 | Logstash | Web Logs | Log Collection |
| Nominum Vantio (part of Akamai) | 5.2 | Syslog | Application Servers | Log Collection |
| Novell eDirectory | 8.8 for Windows and Linux | SNMP | Router | Log Collection |
| Nozomi Networks | N/A | Syslog | Cloud | Log Collection |
| NXLog | Enterprise Edition | Syslog | Access Control | Log Collection |
| Okta Workforce Identity Cloud | N/A | Plugin | Cloud | Log Collection |
| OPSWAT MetaAccess Cloud | 3.2 | Plugin | Cloud | Log Collection |
| OPSWAT MetaDefender | 3.1 | REST | Endpoint | Log Collection |
| Oracle Access Manager | 10.1.4.0.3,11g R2 | File,ODBC (for v11g R2) | Access Control | Log Collection |
| Oracle Audit Vault | 10.3, 12.x, 20.3 | ODBC & Logstash | Database | Log Collection |
| Oracle Database | 8i, 9i, 10g, 11g, 11.2g, 12c (Mixed mode auditing and Unified auditing on Windows), 18c (Unified auditing on Unix and Windows), 19c (Unified auditing on Unix and Windows). | Syslog, ODBC, File, Logstash | Database | Log Collection |
| Oracle Database (JDBC) | Oracle 11.xg, Oracle 12c, 18c, 19c (Unified auditing on Unix and Windows) | Logstash | Database | Log Collection |
| Oracle Database Vault | 10g R2 | ODBC, Logstash | Access Control | Log Collection |
| Oracle Directory Server / Sun ONE | 11.1.1.7.1 | File | Access Control | Log Collection |
| Oracle Identity Manager | 9.1 | ODBC, Logstash | Access Control | Log Collection |
| Oracle Internet Directory | 10.x | ODBC, Logstash | Access Control | Log Collection |
| Oracle iPlanet Web Server | 6.1, 7.0 | File | Web Logs | Log Collection |
| Oracle MySQL Enterprise | 5.x | SNMP | Database | Log Collection |
| Oracle Solaris Basic Security Model (BSM) | 8, 9, 10, 11 | Syslog, File | UNIX | Log Collection |
| Oracle WebLogic Server | 10.0, 10.3, 10.3.2, 10.3.5, 10.3.6, 12.x | File | Application Servers | Log Collection |
| Palo Alto Enterprise Firewall | PAN OS versions 3.0, 4.0.7, 5.0, 6.0, 6.1, 6.1.x, 7.0, 7.1, 8.x, 9.x, 10.x | Syslog | Firewall | Log Collection |
| Palo Alto Enterprise Firewall | SSL Decryption | |||
| Palo Alto Panorama Management Server | 4.1.0, 5.1.4, 7.1, 8.x | Syslog | Firewall | Log Collection |
| Palo Alto Prisma Access | 2.1 Schema | Syslog | Cloud | Log Collection |
| Palo Alto Prisma Cloud | 21.x | Syslog | Cloud | Log Collection |
| PAS Global ICS | ||||
| PAS Global ICS | 5.5 | File | ICS | Log Collection |
| Picus | APIv1.0 | |||
| Pivotal HD | Other | |||
| PostgreSQL | 8.4,9.x,15.x | Syslog | Database | Log Collection |
| Preempt Security Behavioral Firewall | 2.2 | Syslog | Analysis | Log Collection |
| Progress WhatsUp Gold | 14.2 | ODBC | Configuration Management | Log Collection |
| Proofpoint Email Security | 6.3, 7.2, 7.5, 8.x | Syslog | Application Firewall | Log Collection |
| Proofpoint Targeted Attack Protection | API v1.0 | Plugin | Cloud | Log Collection |
| Pulse Connect Secure (formerly Juniper SSL VPN) | 5.4, 5.5, 6.0, 6.2 R2, 6.5 R2, 7.0 R2, 7.1 R5, 7.2 R1, 8.0, 8.0 R7.1, 8.x, and 9.x | Syslog | VPN | Log Collection |
| Qualys Vulnerability Management | API V2.0 | Plugin | Cloud | Log Collection |
| Radiator Radius Server | 4.x | File | Access Control | Log Collection |
| Radiflow iSID | N/A | Syslog | ICS | Log Collection |
| Radware AppWall | 5.6 | Syslog | Application Firewall | Log Collection |
| Radware AppWall | ||||
| Radware DDoS | API v1.0 | Plugin | Cloud | Log Collection |
| Radware DefensePro | 5.01.02, 6.05, 8.x | Syslog, SNMP | IPS | Log Collection |
| Raz-Lee iSecurity for IBM iSeries | 11.4 | Syslog | Application Firewall | Log Collection |
| Riverbed Cascade Profiler (formerly known as mazu Profiler) | 5.5.2, 6.0, 7.0, 9.5.1 | SNMP | IPS | Log Collection |
| Riverbed Steelhead | 7.0.2, 9.x | Syslog, SNMP | Router | Log Collection |
| RSA Access Manager | 6.0, 6.2 on Solaris, Windows, and Linux | File | Access Control | Log Collection |
| RSA Adaptive Authentication (Hosted) | 8.8, 8.9, 9.0, 9.1 | File | Access Control | Log Collection |
| RSA Adaptive Authentication (OnPrem) | 6.0.2.1 | Syslog | Access Control | Log Collection |
| RSA Data Loss Prevention Suite | 7.0.0, 8.0, 8.0 SP1, 8.5, 8.8, 9.x | Syslog | DLP | Log Collection |
| RSA Data Protection Manager (formerly RSA Key Manager) | 2.1.3, 2.5, 2.7, 3.1 | Syslog | Access Control | Log Collection |
| RSA Federated Identity Manager | 4.1 | File | Access Control | Log Collection |
| RSA Identity Governance & Lifecycle | 6.5.1, 6.9 | Access Control | Log Collection | |
| RSA NetWitness Platform Malware Analysis | 1.0.5.0 | Syslog | Antivirus | Log Collection |
| RSA SecurID Access Authentication Mgr | 8.x | Syslog | Access Control | Log Collection |
| RSA SecurID Access Cloud Authentication Service | All latest versions | Plugin | Access Control | Log Collection |
| RSA Web Threat Detection (formerly Silver Tail System Forensics and Mitigator) | Forensics 1.x, 2.x, and 3.x | Syslog | Analysis | Log Collection |
| SafeBreach | N/A | N/A | N/A | Log Collection |
| Safend Protector | 3.x | Syslog | Configuration Management | Log Collection |
| SafeNet Hardware Security Module | 6.2.0, 8.x | Syslog | Access Control | Log Collection |
| Safestone DetectIT | 14.3 | Syslog | Analysis | Log Collection |
| Salesforce | API v1.0 | Plugin | Cloud | Log Collection |
| Secdo Platform | Other | |||
| SECUDE Halocore | Halocore v3.8/ BI Launchpad 4.1 minimum SP2 | Syslog | Document | Log Collection |
| SECUDE Security Intelligence | 1 | File | Analysis | Log Collection |
| Securaa | APIv1.0 | |||
| Securonix SNYPR | 6 | Syslog | Analysis | Log Collection |
| Sendmail | Sendmail : 8.x | Syslog | UNIX | Log Collection |
| Senrio Insight | 1 | Syslog | Analysis | Log Collection |
| ServiceNow ITSM | Other | |||
| Siemplify ThreatNexus | 2.5 | Orchestration & Automation | ||
| Silver Peak WAN | 5.1.1.0 | Syslog | Router | Log Collection |
| SkyFormation | 2.2.4 | Syslog | Analysis | Log Collection |
| Skyhigh Web Gateway (previously known as McAfee Web Gateway) | 6.8.5, 7.x, 8.x, 11.2.16 | File, Syslog | Web Logs | Log Collection |
| Slack | Other | |||
| Soltra Edge | Threat Intel | |||
| SonicWall E-Class SRA / Aventail SSL VPN | 8.8, 9.0, 10.x | Syslog, File | VPN | Log Collection |
| SonicWALL Email Security | 7.2 | Syslog | VPN | Log Collection |
| Sophos Enterprise Console | 3.0, 4.5, 4.7, 5.x | ODBC,SNMP | Antivirus | Log Collection |
| Splunk Phantom RSA Security Analytics App | Orchestration & Automation | |||
| Squid | 2.5.9, 2.7, 3.x | File | Web Logs | Log Collection |
| SSH Communications Security CryptoAuditor | SSL Decryption | |||
| STEALTHbits StealthINTERCEPT | 3.3 | Syslog | Access Control | Log Collection |
| STEALTHbits StealthINTERCEPT | ||||
| Subrat test 1 | 1.0 | SSL Decryption | Analysis | SSL Decryption |
| Subrat Test for Metdata UI | 1.0 | SSL Decryption | Analysis | SSL Decryption |
| Swimlane | Orchestration & Automation | |||
| Sybase ASE | 15.x | ODBC | Database | Log Collection |
| Symantec Data Center Security | 6.9 | JDBC/Logstash | Security IDS | Log Collection |
| Symantec Data Center Security | 6.9 | ODBC | Security.IDS | Log Collection |
| Symantec DLP (part of Broadcom Inc.) | 10.5.1, 11, 12.x, 14.x, 15.x | Syslog | DLP | Log Collection |
| Symantec Endpoint Security Events | 14.3.x | Plugin | Host.Cloud | Log Collection |
| Symantec Endpoint Security Events Plugin Event Source Log Configuration Guide | Log Collection | |||
| Symantec Endpoint Security Incidents | 14.3.x | Plugin | Host.Cloud | Log Collection |
| Symantec Web Security Services (part of Broadcom Inc.) | API v1.0 | Plugin | Host.Cloud | Log Collection |
| Symantec Zero Trust Network Access (ZTNA) | v2 | Plugin | Host.Cloud | Log Collection |
| Syncurity IR Flow | Orchestration & Automation | |||
| Tenable Nessus | ||||
| Tenable Nessus | NessusClient 1.0.2 Nessus 3.0.6, 4.0.1, 4.2, 4.4, 5.0, 7.x, 8.x | File | Vulnerability | Log Collection |
| Tenable.ot powered by Indegy | 3.x | Syslog | Analysis | Log Collection |
| ThreatConnect Threat Intelligence Platform | Threat Intel | |||
| Trellix ePolicy Orchestrator | 7.2 | JDBC/ Logstash | Security | Log Collection |
| Trend Micro Deep Discovery Analyzer | Log Collection; Documentation; Integration; | Syslog | Advanced Threat Detection | Log Collection |
| Trend Micro Deep Security | Syslog | Advanced Threat Detection | Log Collection | |
| Trend Micro InterScan Messaging Security Suite | 7.1, 9.1 | Syslog; File; SNMP | Firewall | Log Collection |
| Trend Micro InterScan Messaging Security Suite | 7.1, 9.1 | File, SNMP (for 7.1)Syslog (for 9.1) | Application Firewall | Log Collection |
| Trend Micro InterScan Web Security | File, ODBC (3.1 only), Syslog (5.6, 6.x) | Host.Web Logs | Log Collection | |
| Trend Micro InterScan Web Security | 3.1, 5.6, 6.x | File,ODBC (3.1 only), Syslog (5.6, 6.x) | Web Logs | Log Collection |
| Trend Micro OfficeScan / Control Manager | Syslog, SNMP | Security.Antivirus | Log Collection | |
| Trend Micro OSSEC | Syslog | Security.Intrusion | Log Collection | |
| Trend Micro OSSEC | 2.5.1, 2.6 | Syslog | Intrusion | Log Collection |
| Trend Micro ScanMail | CEF; SNMP | Firewall | Log Collection | |
| Trend Micro ScanMail | ScanMail 8.0 Service Pack 1, 10.2, 14.x | SNMP | Application Firewall | Log Collection |
| Trend Micro Server Protect | SNMP | Security.Antivirus | Log Collection | |
| Trend Micro TippingPoint (formerly HP TippingPoint) | 2.x, 3 . x, 4.x, 5.x | Syslog | IDS | Log Collection |
| Tripwire Enterprise | 5.4, 5.5, 7.x, 8.x | Syslog,File | Configuration Management | Log Collection |
| Tufin SecureTrack | 12.2, 20.1 | Syslog | Configuration Management | Log Collection |
| UnboundID Identity Data Store | 4.5.1.1 | Syslog | Access Control | Log Collection |
| Universal REST API | API v1.0 | Plugin | Cloud | Log Collection |
| Varonis DatAdvantage | 5.5, 5.9, (6.x for Syslog only) | ODBC for 5.5Syslog for 5.9 | Access Control | Log Collection |
| VMware AppDefense | API v1.0 | Plugin | Cloud | Log Collection |
| VMware ESX / ESXi | ESX: 3.0.3, 3.5, 4.0, 4.1ESXi: 3.5, 4.0, 4.1, 5.0, 5.1, 5.5, 6.x, 7.0 U2 | Plugin | Virtualization | Log Collection |
| VMware NSX | 6.x | Syslog | Virtualization | Log Collection |
| VMware Orchestrator | 5.5 | ODBC | Virtualization | Log Collection |
| VMware Unified Access Gateway (UAG) | 2209 | Syslog | Access Control | Log Collection |
| VMware vCenter Server | VirtualCenter Server: 2.0.2, 2.5vCenter Server: 4.1, 5.0, 5.1, 5.5, 6.x | Plugin | Virtualization | Log Collection |
| VMware vCloud Director | 1 | Syslog | Configuration Management | Log Collection |
| VMware View | 3.1, 4.0, 4.5, 4.6, 5.0, 5.1, 5.2, 5.3, 6.0, 7.x | File, ODBC, Syslog | Virtualization | Log Collection |
| VMware vRealize Automation | 6.0.1, 6.2 | ODBC | Virtualization | Log Collection |
| VMware vRealize Operations Manager | 5.8.2, 6.0 | SNMP, Syslog | Virtualization | Log Collection |
| VMware vSphere Event Source Log Configuration Guide | Log Collection | Plugin | Cloud | |
| VMware Workspace ONE UEM | 1904 & above | Syslog | Configuration Management | Log Collection |
| Zscaler Deception Implementation Guide | 4.13.10 | Syslog |