Integration with Splunk

Splunk Cloud Platform is a powerful security information and event management (SIEM) platform that enables organizations to collect, analyze, and correlate security data from various sources, providing real-time visibility and threat detection capabilities for effective incident response and proactive security management. The integration between Acronis Cyber Protect Cloud and Splunk SIEM helps MSPs automate threat detection across all customer networks and endpoints.

This integration is enabled through the Acronis SIEM Connector. The SIEM Connector uses the Acronis agent as a log writer, enabling MSPs to store Acronis Alerts, Events, Activities, and Audit Log on any endpoint in the customer network from where they can be ingested by the SIEM, or send those logs to a syslog server. The Connector supports CEF and JSON log formats.