Ingestion Methods

In order to protect your business, you need to know what happens. The monitoring of your assets is a prerequisite to their security.

This chapter details the ingestion methods to integrate SEKOIA.IO into your ecosystem.

SEKOIA.IO is able to collect logs through various mechanisms, configuration on your side should be easy! Here is an overview on how integration could be done with SEKOIA.IO.

ingestion_methods

SEKOIA.IO supports the following log collectors:

Syslog over TLS (intake.sekoia.io:10514): forward your events with the Syslog protocol specified in RFC 5424.
RELP over TLS (intake.sekoia.io:11514): forward your events with Rsyslog’s reliable protocol called RELP.
HTTPS (https://intake.sekoia.io): POST your JSON events to SEKOIA.IO.
Cloud hosting and API polling: configure SEKOIA.IO to regularly retrieve your logs.

If these solutions do not meet your needs, contact our support.

Syslog integration

We provide documentation and example configurations on how to configure your log system for Rsyslog, but it should be easy to configure other log collectors to forward their events to SEKOIA.IO.

HTTPS integration

To push your events through our HTTP log collector, you have to POST your logs in the JSON format. To send us events, you should set Content-Type HTTP header to application/json.

Cloud & SaaS integration

SEKOIA.IO is also able to retrieve logs and data from cloud platforms, such as Microsoft Azure, Amazon Web Services or Google Cloud.