| # | Device Name | Integration Method | Log Format |
| 1 | Abi-bot | Syslog | Syslog(default) |
| 2 | Apache | Syslog | Syslog(default) |
| 3 | Arcon PIM | Syslog | Syslog(default) |
| 4 | Array WAF | Syslog | Syslog(default) |
| 5 | Aruba Networks ClearPass | Syslog | CEF |
| 6 | Asimily | Syslog | Syslog(default) |
| 7 | Avaya SBC | Syslog | Syslog(default) |
| 8 | AWS ALB | API | |
| 9 | AWS cloudwatch | API | JSON |
| 10 | AWS RDS | API | |
| 11 | Azure Activity | API | JSON |
| 12 | Azure AD | API | JSON |
| 13 | Azure File Server | API (Blob storage) | JSON |
| 14 | Azure Front Door | API (Blob storage) | JSON |
| 15 | Azure Onedrive | API | JSON |
| 16 | Azure Outlook | API | JSON |
| 17 | Azure Sharepoint | API | JSON |
| 18 | Barracuda Email Security Gateway | Syslog | Syslog(default) |
| 19 | Barracuda Firewall | Syslog | Syslog(default) |
| 20 | Barracuda Load Balancer ADC | Syslog | CEF |
| 21 | Barracuda WAF | Syslog | Syslog(default) |
| 22 | BeroeEKYs In-house built application | Syslog | Syslog(default) |
| 23 | beroe-live-stage (In-house built application) | Syslog | Syslog(default) |
| 24 | BeyondTrust PIM | Syslog | Syslog(default) |
| 25 | Bitdefender Gravityzone | Syslog | Syslog(default) |
| 26 | Box Device | API | JSON |
| 27 | Buffalo NAS | Syslog | Syslog(default) |
| 28 | Carbon Black | API(Cloud)/Sylog(On-prim) | JSON/CEF |
| 29 | Checkpoint Firewall | Syslog | Syslog(default) |
| 30 | Checkpoint IPS and DNS Security | Syslog | Syslog(default) |
| 31 | Cimcor CimTrak | Syslog | CTK |
| 32 | Cisco AMP | API | |
| 33 | Cisco ASA | Syslog | Syslog(default) |
| 34 | Cisco FMC | Syslog | Syslog(default) |
| 35 | Cisco Iron Port | Syslog | Syslog(default) |
| 36 | Cisco ISE | Syslog | Syslog(default) |
| 37 | Cisco Meraki | Syslog | Syslog(default) |
| 38 | Cisco RV | Syslog | Syslog(default) |
| 39 | Cisco Umbrella | API | |
| 40 | Cisco WLC | Syslog | Syslog(default) |
| 41 | Citrix NetScaler | Syslog | CEF |
| 42 | Clearswift Web Security | Syslog | Syslog(default) |
| 43 | CloudSEK | API | JSON |
| 44 | Commvault | Syslog | Syslog(default) |
| 45 | Confluence | API | JSON |
| 46 | Crisil_DMS | Syslog | Syslog(default) |
| 47 | Crowdstrike | API | CEF |
| 48 | Cyberark | Syslog | Syslog |
| 49 | Cyberoam Firewall | Syslog | Syslog(default) |
| 50 | CylancePROTECT | Syslog | Syslog(default) |
| 51 | Darktrace | Syslog | Syslog(default) |
| 52 | Deep Security | Syslog | CEF |
| 53 | DNN Storage | Syslog | Syslog(default) |
| 54 | DrayTek | Syslog | Syslog(default) |
| 55 | Dropbox | Syslog | CEF |
| 56 | DUO Security | Syslog | CEF |
| 57 | Elastic EDR | Syslog | Syslog(default) |
| 58 | Endgame | Syslog | CEF |
| 59 | EScan | Syslog | Syslog(default) |
| 60 | ESET Protect | Syslog | Syslog(default) |
| 61 | ExtraHop Reveal | Syslog | CEF |
| 62 | F5 | Syslog | Syslog(default) |
| 63 | F5 BIG IP LTM | Syslog | Syslog(default) |
| 64 | F5 VPN | Syslog | Syslog(default) |
| 65 | F5 WAF(Big-IP) | Syslog | CEF |
| 66 | Filezilla | Syslog | Syslog(default) |
| 67 | FireEye | Syslog | CEF |
| 68 | FireEye HX | Syslog | CEF |
| 69 | Forcepoint DLP | Syslog | CEF |
| 70 | Forcepoint Email cloud | API | JSON |
| 71 | Forcepoint Email Security | Syslog | CEF |
| 72 | Forcepoint NGFW | Syslog | Syslog(default) |
| 73 | Forcepoint Security | Syslog | CEF |
| 74 | Forescout | Syslog | Syslog(default) |
| 75 | Forti Sandbox | Syslog | Syslog(default) |
| 76 | Fortinet | Syslog | Syslog(default)/CEF |
| 77 | Fortinet ADC | Syslog | Syslog(default) |
| 78 | Fortinet Mail | Syslog | Syslog(default) |
| 79 | Fortinet Web/FortiWeb | Syslog | Syslog(default)/CEF |
| 80 | Genian NAC | Syslog | Syslog(default) |
| 81 | Google Cloud | API | JSON |
| 82 | Google workspace | API | JSON |
| 83 | Gshield | Syslog | Syslog(default) |
| 84 | GTB DLP | Syslog | Syslog(default) |
| 85 | Haltdos DDoS Solution | Syslog | Syslog(default) |
| 86 | Holm Security | API | JSON |
| 87 | Huawei Firewall | Syslog | Syslog(default) |
| 88 | Huawei SAN Switch | Syslog | Syslog(default) |
| 89 | IBM Guardium | Syslog | Syslog(default) |
| 90 | IBoss Secure Web Gateway | Syslog | Syslog(default) |
| 91 | Imperva SecureSphere | Syslog | CEF |
| 92 | Imperva WAF | Syslog | CEF |
| 93 | Indusface | API | JSON |
| 94 | Infinity Firewall | API | JSON |
| 95 | Infocyte | Syslog | CEF |
| 96 | intel isef | Syslog | CEF |
| 97 | IPAM | Syslog | Syslog(default) |
| 98 | IPS Checkpoint logs | Syslog | Syslog(default) |
| 99 | Isilon | Syslog | Syslog(default) |
| 100 | Jira Cloud | API | JSON |
| 101 | Jump Cloud | Syslog | Syslog(default) |
| 102 | Juniper SRX | Syslog | Syslog(default) |
| 103 | Kaspersky Lab | Syslog | CEF |
| 104 | Levelle SD-WAN | Syslog | Syslog(default) |
| 105 | LinkProof | Syslog | Syslog(default) |
| 106 | Linux DHCP | Syslog | Syslog(default) |
| 107 | Linux DNS | Syslog | Syslog(default) |
| 108 | Linux OS | Syslog | Syslog(default) |
| 109 | Mcafee EPO | Syslog | Syslog(default) |
| 110 | Mcafee IPS | Syslog | Syslog(default) |
| 111 | Mcafee MVision | API | JSON |
| 112 | Mcafee Web | Syslog | Syslog(default) |
| 113 | Mikrotik | Syslog | Syslog(default) |
| 114 | Mimecast | API | JSON |
| 115 | Mod Security - Web security | Syslog | Syslog(default) |
| 116 | MS Window | Nxlog | |
| 117 | MS_Exchange | Syslog | Syslog(default) |
| 118 | MSSQL | Syslog | Syslog(default) |
| 119 | MySQL | Syslog | Syslog(default) |
| 120 | Nessus VA | API | |
| 121 | Netcore Email Server | Syslog | Syslog(default) |
| 122 | Netskope | API | JSON |
| 123 | Netwrix | Syslog | Syslog(default) |
| 124 | Ngnix WAF | Syslog | Syslog(default) |
| 125 | NLB Healthcare - Custom Application | Syslog | Syslog(default) |
| 126 | Offbox ARE | Syslog | Syslog(default) |
| 127 | Offbox CAP | Syslog | Syslog(default) |
| 128 | Offbox CDA | Syslog | Syslog(default) |
| 129 | Offbox CMA | Syslog | Syslog(default) |
| 130 | Offbox Financia | Syslog | Syslog(default) |
| 131 | Offbox Icomply | Syslog | Syslog(default) |
| 132 | Offbox Quantix | Syslog | Syslog(default) |
| 133 | Offbox SLV | Syslog | Syslog(default) |
| 134 | OFFBOX SMARTRACK | Syslog | Syslog(default) |
| 135 | Offbox TLF | Syslog | Syslog(default) |
| 136 | Office 365 | API | JSON |
| 137 | OneLogin | API | JSON |
| 138 | Open Sense | Syslog | Syslog(default) |
| 139 | OpenAM | Syslog | Syslog(default) |
| 140 | OpenDJ | Syslog | Syslog(default) |
| 141 | OpenVPN | Syslog | Syslog(default) |
| 142 | Oracle Cloud Infrastructure | API | JSON |
| 143 | Oracle DB | Syslog | Syslog(default) |
| 144 | Oracle Linux Server (Database Logs) | Syslog | Syslog(default) |
| 145 | Oracle NetSuite | API | JSON |
| 146 | Oracle VCN | Syslog | Syslog(default) |
| 147 | Palo Alto Firewall | Syslog | Syslog(default) |
| 148 | Palo Alto Networks Cortex XDR | Syslog | CEF |
| 149 | PFSense Firewall | Syslog | Syslog(default) |
| 150 | Postgresql | Syslog | Syslog(default) |
| 151 | Prophaze WAF | Syslog | Syslog(default) |
| 152 | Pulse Secure | Syslog | Syslog(default) |
| 153 | RadWare | Syslog | Syslog(default) |
| 154 | Radware WAF | Syslog | Syslog(default) |
| 155 | Rise LDP | Syslog | Syslog(default) |
| 156 | Ruckus WLC | Syslog | Syslog(default) |
| 157 | Salesforce | API | JSON |
| 158 | SAP Application | Http Listener | JSON |
| 159 | SCCM Device | API | |
| 160 | SDC DLP Device | Syslog | Syslog(default) |
| 161 | Secpod SanerNow | API | JSON |
| 162 | SecureCircle | Syslog | Syslog(default) |
| 163 | SentinelOne | Syslog | CEF |
| 164 | Seqrite | API | |
| 165 | Sitecore | Syslog | Syslog(default) |
| 166 | SMTP Email Server | Syslog | Syslog(default) |
| 167 | Snipe-IT | Syslog | Syslog(default) |
| 168 | Snort IPS | Syslog | Syslog(default) |
| 169 | Somansa | Syslog | Syslog(default) |
| 170 | Sonicwall Firewall | Syslog | Syslog(default) |
| 171 | Sonicwall SMA | Syslog | Syslog(default) |
| 172 | Sophos Central | API | CEF |
| 173 | Sophos Firewall | Syslog | Syslog(default) |
| 174 | Squid | Syslog | Syslog(default) |
| 175 | Stormshield | Syslog | Syslog(default) |
| 176 | Switch | Syslog | Syslog(default) |
| 177 | Symantec AV | Syslog | Syslog(default) |
| 178 | Symantec Endpoint Security/Protection | API | JSON |
| 179 | Synology | Syslog | Syslog(default) |
| 180 | Tacitine Firewall | Syslog | Syslog(default) |
| 181 | Techbridge Email Gateway | Syslog | Syslog(default) |
| 182 | TippingPoint UnityOne | Syslog | CEF |
| 183 | Titus DB | Syslog | Syslog(default) |
| 184 | Trellix | Syslog | Syslog(default) |
| 185 | Trend Micro | Syslog | Syslog(default) |
| 186 | Trend Micro Apex Central | Syslog | CEF |
| 187 | TrendMicro CAS | API | JSON |
| 188 | TrendMicro Vision One | Syslog | CEF |
| 189 | TrendMicro Worry-Free | API | KV |
| 190 | Twin Gate VPN | Syslog | Syslog(default) |
| 191 | Untangle | Syslog | Syslog(default) |
| 192 | Vicarius Topia | API | JSON |
| 193 | Vicarius Vulnerability Remediation | Syslog | Syslog(default) |
| 194 | VmWare Esxi | Syslog | Syslog(default) |
| 195 | VMWare HCI | Syslog | Syslog(default) |
| 196 | Wallix PAM | Syslog | Syslog(default) |
| 197 | WatchGaurd Firewall | Syslog | CEF |
| 198 | Wazuh | Syslog | Syslog(default) |
| 199 | Web Logic | Syslog | Syslog(default) |
| 200 | Websense | Syslog | CEF |
| 201 | Windows AD | Nxlog | |
| 202 | Windows DHCP | Nxlog | |
| 203 | Windows DNS | Nxlog | |
| 204 | Windows IIS | Nxlog | |
| 205 | Windows NAS | Syslog | Syslog(default) |
| 206 | Zimbra EMail | Syslog | Syslog(default) |
| 207 | ZOOM App | API | JSON |
208 | Zscaler NSS | Syslog | CEF |
209 | Zyxel | Syslog | Syslog(default) |
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article