topic Re: Can Be Paloalto integrated with Kafka? in General Topics

Can Be Paloalto integrated with Kafka?

Alpalo — Wed, 26 Apr 2023 10:25:00 GMT

Hello team,

We want to know if Palo Alto can be integrated with Kafka and if it is possible, we need to know how it can be done.

Thanks so much,

Best Regards

Re: Can Be Paloalto integrated with Kafka?

BPry — Wed, 26 Apr 2023 20:59:55 GMT

@Alpalo,

This is a pretty broad question honestly. Kafka use varies greatly depending on how you've configured it and can be used in conjunction with different SIEM/SOAR solutions or you can can use something like syslog-kafka or syslog-ng or GO Kafka to get the syslog server up and running and have that act as the Kafka producer.

Can you detail a bit more what you're actually trying to do and what you mean by "integrated with Kafka"? Like most things Kafka, there's not one answer and you'll likely find 20 different ways to accomplish the same thing.

Re: Can Be Paloalto integrated with Kafka?

Alpalo — Thu, 27 Apr 2023 16:49:15 GMT

Hi,

Thanks so much for yor answer,

The need is to send the logs of the Palo Alto Firewalls directly to Kafka through an integration if it exists, without using syslog, which is how we are doing it now, so that later we can process them in Kibana.

Regardas

Re: Can Be Paloalto integrated with Kafka?

Alpalo — Wed, 03 May 2023 06:40:45 GMT

Re: Can Be Paloalto integrated with Kafka?

BPry — Wed, 03 May 2023 21:42:56 GMT

@Alpalo,

I'm not sure that there's anyway to integrate this directly. I've only ever seen it integrated through syslog; I don't think there's a way to integrate it directly.