topic Prisma cloud integration with LogRhythm in Prisma Cloud Discussions

Prisma cloud integration with LogRhythm

EllieS — Thu, 01 Jul 2021 02:22:43 GMT

Hi there,

is there any way to integrate Prisma cloud with LogRhythm, to send the alert to the SIEM?

@PrismaCloud

Re: Prisma cloud integration with LogRhythm

AKing9 — Thu, 11 Aug 2022 18:02:12 GMT

Greetings EllieS,

I hope that this note finds you well! I know that it has been a while since you had posted this question but I wanted to see if you still potentially needed any help. Thank you for your time and I hope that you have a good remainder of your day.

Kind Regards,

J. Avery King

Re: Prisma cloud integration with LogRhythm

PYadav2 — Thu, 08 Sep 2022 04:05:18 GMT

Hi @EllieS

Thank you for taking time to post your question here. Unfortunately, there is no way to integrate Prisma cloud with LogRhythm, to send the alert to the SIEM.

I hope this answers your question!

Please let me know if you need any additional information or have any concerns,

I will be happy to help!

Warm Regards

Re: Prisma cloud integration with LogRhythm

PYadav2 — Thu, 08 Sep 2022 14:58:45 GMT

Hi @EllieS

I hope you are doing well. From what I mean by saying unfortunately no is not directly but through webhook you can.

Please find the document here and please let me know if you have any additional questions.

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/configure-external-integrations-on-prisma-cloud/integrate-prisma-cloud-with-webhooks

We can also use python script to send data to any SIEM including logrhythm but not a native integration.

https://github.com/PaloAltoNetworks/pcs-serverless-syslog

You can use the above GitHub as well.

I am attaching some additional document for you to refer:

https://docs.logrhythm.com/docs/OCbeats/logrhythm-open-collector

https://docs.logrhythm.com/docs/OCbeats/aws-s3-beat/configure-the-aws-s3-log-source-in-the-siem

Thank you for your understanding,

Warm Regards!