Integration Overview

Integration connects SentriaOne xSIEM with the systems around it. There are two directions:

• Inbound — systems that send data to SentriaOne xSIEM: logs from end devices and network devices, and a copy of network traffic.
• Outbound — SentriaOne xSIEM sends information to other systems, such as reports delivered by email.

Integration	Direction	Data	Read more
End device logs	Inbound	Operating system and application logs from servers, workstations, and VMs	Sending Logs (Syslog)
Network device logs	Inbound	Logs from firewalls, routers, and switches	Sending Logs (Syslog)
Network traffic	Inbound	Copy of packets from a SPAN port or TAP	Packet Mirroring
Email	Outbound	Scheduled reports and notifications	Email

How log data flows

1. The device or application records an event in its own log.
2. The log is forwarded to the SentriaOne xSIEM collector.
3. SentriaOne xSIEM normalizes and enriches the log so it can be searched and correlated with other data. See Data Processing.
4. The log becomes searchable in Records, is used for detection, and can be visualized in custom Dashboards.

See Sending Logs (Syslog) for how to configure devices, and Log Sources for background on log types and collection methods.