Prisma cloud integration with LogRhythm

[EllieS]

Hi there,

is there any way to integrate Prisma cloud with LogRhythm, to send the alert to the SIEM?

@PrismaCloud 

[AKing9]

Greetings EllieS,

I hope that this note finds you well! I know that it has been a while since you had posted this question but I wanted to see if you still potentially needed any help. Thank you for your time and I hope that you have a good remainder of your day.

Kind Regards,

J. Avery King

[PYadav2]

Hi @EllieS 

Thank you for taking time to post your question here. Unfortunately, there is no way to integrate Prisma cloud with LogRhythm, to send the alert to the SIEM.

I hope this answers your question!

Please let me know if you need any additional information or have any concerns,

I will be happy to help!

Warm Regards

[PYadav2]

Hi @EllieS 

I hope you are doing well. From what I mean by saying unfortunately no is not directly but through webhook you can.

Please find the document here and please let me know if you have any additional questions. 

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/configure-external-integrat...

We can also use python script to send data to any SIEM including logrhythm but not a native integration.

https://github.com/PaloAltoNetworks/pcs-serverless-syslog

You can use the above GitHub as well.

I am attaching some additional document for you to refer:

https://docs.logrhythm.com/docs/OCbeats/logrhythm-open-collector

https://docs.logrhythm.com/docs/OCbeats/aws-s3-beat/configure-the-aws-s3-log-source-in-the-siem

Thank you for your understanding,

Warm Regards!