Pulling SIEM events from FileCloud
Original Question or Issue:
Is it possible to pull SIEM events from FileCloud instead of receiving them on event triggers?
Environment:
- Product - FileCloud Server
- Version - Any
- Platform - Any
Steps to Reproduce:
SIEM integration.
Error or Log Message:
Defect or Enhancement Number:
Cause:
Feature request.
Resolution or Workaround:
Please note that FileCloud SIEM capability is designed to push SIEM events toward a SIEM receiver. An external party cannot pull SIEM events from the FileCloud VM via API.Notes:
An alternative approach is to pull Audit events from the FileCloud VM via API: Swagger UI.
The audit events contain the same events as SIEM and more, but are not structured the same way.