Device Configuration Guide - Syslog
- Collecting Syslog Sources
- Syslog - Arista Firewalls
- Syslog - Barracuda CloudGen Firewall
- Syslog - Cisco ASA
- Syslog - Cisco FTD
Device Configuration Guide - OS logs
- Collecting macOS Event Logs
- Finding the Source of Windows Logging Audit Policy Configuration
- Enforcing Windows Logging Audit Policies (Microsoft Intune)
- Enforcing Windows Logging Audit Policies (AD and local GPO)
- Collecting Linux Flat File Logs
Device Configuration Guide - API
- API - 1Password
- API - AWS CloudTrail
- API - AWS S3
- API - Azure Event Hub
- API - Azure Event Hub - Adding Sources
Device Configuration Guide - HEC
- Collecting HEC (HTTP Event Collector) Sources
- HEC - Bitwarden (Cloud)
- HEC - Cloudflare
- HEC - DNSFilter
- HEC - Keeper Security
Using SIEM Logs
- Manage Queries - Running Saved and Starter Queries
- Manage Queries - Saved and Scheduled Queries
- Searching Logs - ESQL
- Searching Logs - Query Builder
- Smart Filtering - Determining What Gets Filtered
Troubleshooting
- Huntress Managed SIEM FAQ
- Limitations of Supporting Third Party Log Providers
- Non-Reporting Log Source Escalations
- Troubleshooting SIEM HEC and API-based Collection
- Troubleshooting SIEM Local Syslog Collection