SIEM integration

Area 1 has been renamed

Area 1 has currently been renamed to Cloud Email Security (formerly Area 1).

With a bit of configuration, you can also bring Email Security (formerly Area 1) data into your Security Information and Event Management (SIEM) tools to view message-level information outside of the dashboard and create your own custom reports.

Connect a SIEM tool

The following steps are required to connect your SIEM tool.

1. Set up your SIEM tool

For help setting up the proper configuration in your SIEM tool, refer to the following guides:

• KnowBe4
• LogScale
• Splunk
• Sumo Logic

2. Create a webhook

Refer to Alert webhooks to learn how to create a webhook and send data into your SIEM tool.