Forward logs from NLA to other SIEM Tools

[sarfarosh]

Dear Team,

We have a requirement where in RAW logs from NLA need to be forwarded to other SIEM tools like SPLUNK,

Can this been done ? if yes how can we achieve this ?

[scottwilkerson]

You can add an additional output

go to Configure -> Global Config
Click "Show Outputs" on the right

Here you can add an output to also send the logs to such as another syslog server
https://www.elastic.co/guide/en/logstas ... yslog.html

Additional output options
https://www.elastic.co/guide/en/logstas ... ugins.html