Can Be Paloalto integrated with Kafka?

[Alpalo]

Hello team,

We want to know if Palo Alto can be integrated with Kafka and if it is possible, we need to know how it can be done.

Thanks so much,

Best Regards

[BPry]

@Alpalo,

This is a pretty broad question honestly. Kafka use varies greatly depending on how you've configured it and can be used in conjunction with different SIEM/SOAR solutions or you can can use something like syslog-kafka or syslog-ng or GO Kafka to get the syslog server up and running and have that act as the Kafka producer. 

Can you detail a bit more what you're actually trying to do and what you mean by "integrated with Kafka"? Like most things Kafka, there's not one answer and you'll likely find 20 different ways to accomplish the same thing. 

[Alpalo]

Hi,

Thanks so much for yor answer,

The need is to send the logs of the Palo Alto Firewalls directly to Kafka through an integration if it exists, without using syslog, which is how we are doing it now, so that later we can process them in Kibana.

Regardas

[Alpalo]

The need is to send the logs of the Palo Alto Firewalls directly to Kafka through an integration if it exists, without using syslog, which is how we are doing it now, so that later we can process them in Kibana.

[BPry]

@Alpalo,

I'm not sure that there's anyway to integrate this directly. I've only ever seen it integrated through syslog; I don't think there's a way to integrate it directly.