Specification
1-year subscription license
Volume tier: 1001 to 5000 licenses
Service: SIEM data integration and enrichment
Compatible SIEM platforms: QRadar, AlienVault, ArcSight, Elasticsearch, DEVO, Splunk
Supported formats: Common Event Format (CEF) and Log Event Extended Format (LEEF)
Requires: WatchGuard EDR, Endpoint Security 360, or Endpoint Security Elite
Includes Event Importer service