SIEM integration

Area 1 has been renamed

Area 1 is now Email Security (formerly Area 1).

With a bit of configuration, you can also bring Email Security (formerly Area 1) data into your Security Information and Event Management (SIEM) tools to view message-level information outside of the dashboard and create your own custom reports.

Connect a SIEM tool

The following steps are required to connect your SIEM tool.

1. Set up your SIEM tool

For help setting up the proper configuration in your SIEM tool, refer to the following guides:

• KnowBe4
• LogScale
• Splunk
• Sumo Logic

2. Create a webhook

Refer to Alert webhooks to learn how to create a webhook and send data into your SIEM tool.

Was this helpful?

What did you like?

Accurate

Easy to understand

Solved my problem

Helped me decide to use the product

Other

What went wrong?

Hard to understand

Incorrect information

Missing the information

Other

Thank you for helping improve Cloudflare's documentation!