KRMC Hosted - Settings Page - Server Settings - Event Export (SIEM)

KRMC Hosted Premium accounts have the ability to export events recorded by KRMC Hosted to a customer’s SIEM server in real time. Exporting to Splunk, Graylog, and to a generic Syslog server is supported in the current KRMC Hosted release.  Events that are exported to such a server are located within the Notification options located under the Setting Page.

Note: Syslog server exports will be unencrypted. Splunk and Graylog exports will be encrypted.

The option Customize allows you to choose which events are sent to your configured SIEM server as well as what fields are sent such as Name and Created By.

For more information on KRMC Hosted, please refer to the User Manual located at HERE.