Device Configuration Guide - Syslog
- Collecting Syslog Sources with Huntress SIEM
- SIEM: Syslog - Arista Firewalls
- SIEM: Syslog - Barracuda CloudGen Firewall
- SIEM: Syslog - Check Point Firewall
- SIEM: Syslog - Cisco ASA
Device Configuration Guide - OS logs
- Collecting macOS Event Logs
- Finding the Source of Windows Logging Audit Policy Configuration
- Enforcing Windows Logging Audit Policies (Microsoft Intune)
- Enforcing Windows Logging Audit Policies (AD and local GPO)
- Collecting Linux Flat File Logs
Device Configuration Guide - API
- SIEM: API - 1Password
- SIEM: API - AWS CloudTrail
- SIEM: API - AWS S3
- SIEM: API - Azure Event Hub
- SIEM: API - Azure Event Hub - Adding Sources
Device Configuration Guide - HEC
- Collecting HEC (HTTP Event Collector) Sources in Huntress SIEM
- SIEM: HEC - Bitwarden (Cloud)
- SIEM: HEC - Cato Networks
- SIEM: HEC - Cloudflare
- SIEM: HEC - DNSFilter
Using SIEM Logs
- Manage Queries - Running Saved and Starter Queries
- Manage Queries - Saved and Scheduled Queries
- Searching Logs - ESQL
- Searching Logs - Query Builder
- Smart Filtering - Determining What Gets Filtered
Troubleshooting
- Huntress Managed SIEM FAQ
- Limitations of Supporting Third Party Log Providers
- Managed SIEM - Configure Non-Reporting Log Source Escalations
- Troubleshooting SIEM HEC and API-based Collection
- Troubleshooting SIEM Local Syslog Collection