Integration with Acronis SIEM Connector

The SIEM LogForwarding plan (SIEM Connector 2.0.) eliminates the time-consuming and complex process of manually configuring syslog servers and generating security certificates. Instead of spending hours on infrastructure setup, MSPs simply select a destination device, either an existing machine on the customer's network (Windows or Linux) or a designated syslog server, and the Acronis agent automatically writes Acronis logs to a specified path on that device without requiring additional certificate generation, firewall rule adjustments, or gateway server setup.

The connector now forwards a comprehensive suite of security telemetry including event logs, custom alerts, EDR data, DLP data, URL filtering logs, and activity records—providing MSPs with richer security intelligence than the previous alerts-and-audit-logs-only approach. This expanded data scope enables MSPs to deliver more complete security visibility to their customers.

Each customer tenant now has an independent, dedicated connection to their preferred SIEM platform, ensuring complete data isolation and eliminating compliance risks associated with shared data destinations across multiple tenants. This architectural change addresses critical compliance requirements by guaranteeing that security events and logs from one customer remain completely separate from those of other customers, even within the same MSP account.

The SIEM Connector enables MSPs to maintain HIPAA compliance by allowing logs to be stored directly on any device on the customer network with an Acronis agent. The MSP can use this device as a server and store logs for the required minimum of six years. This capability eliminates the need for separate archival solutions and simplifies compliance audits, as all historical security events and logs remain readily accessible in a single location.