PlatformIntegrations

Syslog integration

Data forwarding

The Syslog integration lets you send activity reports to your security or IT system. You can use the Syslog integration to create a data export or trigger them with a mitigation or data export actions.

Syslog only supports sending Logs data.

Prerequisites

Integrate with Syslog

  1. Navigate to Platform Settings > Integrations and click the Syslog integration.
  2. Click Add Integration.
  3. Provide the following:
    • Integration name: How the integration will appear in your HUMAN account.
    • Authentication method: Select the authentication method for sending data.
      • If you select Web application firewall (WAF), also provide allowed IPs.
    • URL: The endpoint host to send data to.
    • Port: The endpoint port.
    • Protocol: The HTTP protocol to use.
    • Provide an SSL certificate: If you select TLS, upload a CRT file of your SSL certificate.
    • Severity: The severity level as described by The Syslog Protocol.
    • Facility: The facility corresponding to the severity level as describe by The Syslog Protocol.
  4. Click Test Connection.
  5. Once the test succeeds, click Save changes.

You have successfully configured a Syslog integration. Make sure to use the integration to create a data export or trigger it with a data export action.