Malware Alert to Cloud SIEM

[Martin-Webster]

Hi,

is there anyone out there who knows if it is possible to send alerts to a Cloud SIEM solution?

Currently, email alerts are sent to admins, but I'd like to send them elsewhere (current set-up is via Network Wide | Configure | Alerts > Alerts Settings / Security appliance / Malware is downloaded [tick-box]).

This would be Cloud to Cloud (Meraki Cloud to another Cloud) connectivity, so I'm not sure if its an option or a roadmap item.

Thanks.

[alemabrahao]

Maybe this article will help you.

https://help.sumologic.com/docs/cse/ingestion/cisco-meraki/

[Martin-Webster]

Thanks, it looks like that will work 👍

[PhilipDAth]

SIEMs usually use syslog.  Some of them also use NetFlow.

https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Server_Overv... 

https://documentation.meraki.com/MX/Monitoring_and_Reporting/NetFlow_Overview