LogoLogo
⌘Ctrlk
  • Documentation
  • Release Notes
  • API Reference
  • Help Center
AI Assistant
Good afternoon

I'm here to help you with the docs.

⌘Ctrli
AI Based on your context
LogoLogo
  • 🏠Welcome
    • Getting started
    • IDR for Azure AD & CDR for M365
    • CDR for AWS
    • CDR for Azure
    • NDR physical appliances
    • NDR virtual / cloud appliances
    • NDR Traffic engineering and validation
    • Match
    • Stream
    • Recall (QUX only)
    • Appliance operations
    • Deprecated / Retired
    • Navigation updates in the Vectra UI
    • ACCESS
    • COVERAGE
    • RESPONSE
    • SETUP
    • TUNING
    • QUX specific
    • Response
    • SOAR
    • ITSM
    • Coverage
    • Context
    • SIEM
      • CrowdStrike Humio/Logscale
      • CrowdStrike Next-Gen SIEM (RUX)
      • Datadog
      • Devo
      • Elastic
      • Google Chronicle
      • Google SecOps CSIEM (RUX)
      • Hunters
      • IBM QRadar (RUX)
      • LogPoint
      • Microsoft Sentinel (RUX)
      • Sekoia
      • SentinelOne
      • Splunk Cloud (RUX)
      • Splunk Enterprise (RUX)
      • Stellar Cyber OpenXDR
      • Syslog Receivers - Generic (RUX)
    • Access / Authentication
    • Notifications / Data Export
    • Analyst Guidance
    • Updates
    • Dashboards and Reports
    • Detection specific guidance
    • Licensing
    • Backup / Restore / DR
    • Investigate
    • General
    • AI and ML terminology
    • Vectra AI prioritization and scoring factors
    • Appliance support and EOS / EOL policy
    • Bandwidth used between Sensor and Brain
    • How detection PCAPs are generated
    • In-App support
    • Metadata attributes
    • Product Security
    • RSPAN and ERSPAN support
    • Host ID best practices and functionality
    • Vectra's coverage of MITRE ATT&CK and D3FEND
    • Vectra UI supported browsers
    • Why is metadata sharing important
For the complete documentation index, see llms.txt. This page is also available as Markdown.
  1. Documentation
  2. Integrations

SIEM

SIEM integration resources for forwarding Vectra AI detections, entity data, and telemetry to security platforms.

CrowdStrike Humio/LogscaleCrowdStrike Next-Gen SIEM (RUX)DatadogDevoElasticGoogle ChronicleGoogle SecOps CSIEM (RUX)HuntersIBM QRadar (RUX)LogPointMicrosoft Sentinel (RUX)SekoiaSentinelOneSplunk Cloud (RUX)Splunk Enterprise (RUX)Stellar Cyber OpenXDRSyslog Receivers - Generic (RUX)
PreviousMicrosoft Defender EDR process correlationNextCrowdStrike Humio/Logscale

Last updated 11 days ago

Was this helpful?

LogoLogo
linkedinx-twitterfacebookyoutubeinstagramreddit

© 2026 Vectra AI, Inc. All rights reserved.

Was this helpful?