Can I integrate bot analytics in my SIEM visualization? : radware

Can I integrate bot analytics in my SIEM visualization? Print

Created by: Rajesh Gunasekar

Modified on: Tue, 13 Apr, 2021 at 7:33 AM

Yes. ShieldSquare connectors support the integration of bot analytics logs to your SIEM visualization.

Prerequisite

- You need to be in Active mode real-time protection to use this feature

- You need to provide your SIEM resource IP/endpoint and port # for ShieldSquare connector to post the log data

How it works?

ShieldSquare connector generates the data in SYSLOG format as JSON. This will contain parameters like IP, Useragent, URL, Referrer URL, Session ID, UserName, Bot Category, ShieldSquare response time, ShieldSquare processing time <without network latency> and few more pertaining to bot analytics. You can integrate this data in your SIEM tools like Splunk, ArcSignt, IBM Radar etc., to witness bot analytics in your centralized visualization.

Write to support@shieldSquare.com to enable this feature.

Rajesh is the author of this solution article.

Did you find it helpful? Yes No

Can I integrate bot analytics in my SIEM visualization? Print

Related Articles