Integration with NetWitness Logs

NetWitness Logs provides instant visibility into log data spread across your entire IT environment—simplifying threat detection, reducing dwell time and supporting compliance. It enables centralized log management, log monitoring for logs generated by public clouds and SaaS applications, and identification of suspicious activity that evades signature-based security tools.

NetWitness Logs provides instant visibility into log data spread across your entire IT environment—simplifying threat detection, reducing dwell time and supporting compliance. It enables centralized log management, log monitoring for logs generated by public clouds and SaaS applications, and identification of suspicious activity that evades signature-based security tools.

With extensive visibility and enriched log data, NetWitness Logs dramatically accelerates alerting and analysis to speed detection and investigation.

This integration is enabled through the Acronis SIEM Connector. The SIEM Connector uses the Acronis agent as a log writer, enabling MSPs to store Acronis Alerts, Events, Activities, and Audit Log on any endpoint in the customer network from where they can be ingested by the SIEM, or send those logs to a syslog server. The Connector supports CEF and JSON log formats.