Yes. ShieldSquare connectors support the integration of bot analytics logs to your SIEM visualization.
- You need to be in Active mode real-time protection to use this feature
- You need to provide your SIEM resource IP/endpoint and port # for ShieldSquare connector to post the log data
How it works?
ShieldSquare connector generates the data in SYSLOG format as JSON. This will contain parameters like IP, Useragent, URL, Referrer URL, Session ID, UserName, Bot Category, ShieldSquare response time, ShieldSquare processing time <without network latency> and few more pertaining to bot analytics. You can integrate this data in your SIEM tools like Splunk, ArcSignt, IBM Radar etc., to witness bot analytics in your centralized visualization.
Write to support@shieldSquare.com to enable this feature.