- Log Stream Overview
- Supported Vendors and Products
- Parser Manager
- Parsers Overview
- View Parser Details
- Create a Custom Parser
- Import Sample Logs
- Define a Subset of the Sample Logs
- Add Conditions
- Add Basic Parser Information
- Extract Event Fields
- Extract Mapped JSON Fields
- Select JSON Fields from a List of Key/Value Pairs
- Select Tokenized JSON Fields from the Values in the Sample Log
- Manually Enter JSON Path Expressions
- Sample JSON Path Expressions for Manual Entry
- Reorder Mapped JSON Fields
- Review the Matching JSON Fields and Values
- Add Logic to JSON Field Extraction
- Expressions for JSON Parser Field Extractions and Enrichment Mapping
- Extract Fields Using Regular Expressions
- Reserved Fields
- Extract Mapped JSON Fields
- Add Event Builder Rules
- Review and Save Parser
- Manage Existing Custom Parsers
- Tokenize Non-Standard Log Files
- Customize a Default Parser
- Duplicate a Parser
- Enable or Disable Parsers
- Parser Updates
- Live Tail
- Enrichments
- Event Filtering
Supported Vendors and Products
Exabeam supports data sources from the following vendors and products for log ingestion.
Note
This list is updated monthly, so there is a possibility that a newly supported product hasn't been added yet. Contact your account team to request new product additions.
Vendor | Products | Category |
|---|---|---|
1password |
| Access Management |
AIM Security |
| Generative Ai Apps |
APC |
| Other |
Abnormal Security |
| Email Security |
Absolute |
| Epp (Endpoint Protection) |
Accellion |
| File Sharing |
Adaxes |
| Identity Administration |
Admin By Request |
| Privilege Access Management |
Adobe |
| Content Delivery Network (Cdn) |
Airlock |
| Epp (Endpoint Protection) |
Akamai |
| Access Management |
| Siem (Security Information And Event Management) | |
| Workload Protection | |
AlgoSec |
| Network Security Policy Management (Nspm) |
Amazon |
| Access Management |
| Cloud App Security Broker (Casb) | |
| Cloud Auditing | |
| Data Warehouse | |
| Database | |
| Firewall | |
| Generative Ai Apps | |
| Load Balancer | |
| Network Analyzer | |
| Security Configuration Management (Scm) | |
| Virtualization & Containers | |
| Vulnerability Assessment | |
| Waf (Web Application Firewall) | |
| Workload Protection | |
Apache |
| Code Management |
| Database | |
| Remote Access | |
| Web Server | |
| Web Server Auditing | |
AppSense |
| Access Management |
Apple |
| Endpoint Auditing |
Arbor |
| Ddos Mitigation Services |
Arctic Wolf |
| Epp (Endpoint Protection) |
Armis |
| Iot Security |
Armorblox |
| Email Security |
AssetView |
| Epp (Endpoint Protection) |
Atlassian |
| Cloud Auditing |
| Code Management | |
Attivo |
| Honeypot |
Auth0 |
| Access Management |
Avaya |
| Network Devices |
Badge |
| Physical Access Control |
Barracuda |
| Email Security |
| Firewall | |
| Waf (Web Application Firewall) | |
BeyondTrust |
| Privilege Access Management |
| Remote Access | |
Bitdefender |
| Epp (Endpoint Protection) |
Bitglass |
| Cloud App Security Broker (Casb) |
BlackBerry |
| Epp (Endpoint Protection) |
BlueCat Networks |
| Ip Address Management (Ipam) |
Box |
| Dlp (Data Loss Prevention) |
| File Sharing | |
CA Technologies |
| Privilege Access Management |
CDS |
| Backup & Recovery |
Canon |
| Printer |
CatoNetworks |
| Vpn (Virtual Private Network) |
Check Point |
| Cloud App Security Broker (Casb) |
| Email Security | |
| Epp (Endpoint Protection) | |
| Firewall | |
| Identity Administration | |
| Ips (Intrusion Prevention System) | |
| Sandboxing | |
| Vpn (Virtual Private Network) | |
Checkmarx |
| Application Security Testing |
Cimcor |
| File Integrity Monitoring |
Cisco |
| Access Management |
| Cloud Auditing | |
| Communication Platform | |
| Edr (Endpoint Detection & Response) | |
| Email Security | |
| Firewall | |
| Identity Administration | |
| Ndr (Network Detection And Response) | |
| Network | |
| Network Access Control (Nac) | |
| Network Analyzer | |
| Network Devices | |
| Network Infrastructure & Management | |
| Security Services Edge (Sse) | |
| Vpn (Virtual Private Network) | |
Citrix |
| Access Management |
| Insider Risk Management | |
| Virtualization & Containers | |
| Vpn (Virtual Private Network) | |
| Waf (Web Application Firewall) | |
Claroty |
| Iot Security |
| Operational Technology Security | |
Click Studios |
| Privilege Access Management |
Cloudflare |
| Cloud Auditing |
| Network Analyzer | |
| Waf (Web Application Firewall) | |
Cohesity |
| File Sharing |
Commvault |
| Dlp (Data Loss Prevention) |
| Honeypot | |
Confluent |
| Database |
Corelight |
| Ids (Intrusion Detection System) |
Cribl |
| Event Management & Forwarding |
CrowdStrike |
| Edr (Endpoint Detection & Response) |
CrushFTP |
| File Transfer |
CyberArk |
| Privilege Access Management |
Cybereason |
| Epp (Endpoint Protection) |
Cyberhaven |
| Dlp (Data Loss Prevention) |
Cyera |
| Dlp (Data Loss Prevention) |
Cylance |
| Edr (Endpoint Detection & Response) |
| Epp (Endpoint Protection) | |
Cynet |
| Edr (Endpoint Detection & Response) |
Darktrace |
| Siem (Security Information And Event Management) |
DataWatch Systems |
| Physical Access Control |
Delinea |
| Event Management & Forwarding |
| Identity Administration | |
| Privilege Access Management | |
| User Authentication | |
Dell |
| Backup & Recovery |
| File Sharing | |
| File Systems And Object Storage | |
| Firewall | |
Digital Arts |
| Security Services Edge (Sse) |
Digital Guardian |
| Dlp (Data Loss Prevention) |
| Edr (Endpoint Detection & Response) | |
Dnsmasq |
| Network |
Dragos |
| Operational Technology Security |
Dropbox |
| File Sharing |
Dtex Systems |
| Insider Risk Management |
ESET |
| Epp (Endpoint Protection) |
Egnyte |
| File Sharing |
Entrust |
| Access Management |
Epic |
| Siem (Security Information And Event Management) |
Ermes |
| Secure Enterprise Browser |
Exabeam |
| Email Security |
| Endpoint Auditing | |
| Event Management & Forwarding | |
| Siem (Security Information And Event Management) | |
Extrahop |
| Ndr (Network Detection And Response) |
Extreme Networks |
| Network Access Control (Nac) |
| Network Infrastructure & Management | |
F-Secure |
| Epp (Endpoint Protection) |
| Network Security Policy Management (Nspm) | |
F5 |
| Access Management |
| Edr (Endpoint Detection & Response) | |
| Firewall | |
| Load Balancer | |
| Network Automation And Orchestration | |
| Waf (Web Application Firewall) | |
| Web Server | |
FTP |
| File Transfer |
Fastly |
| Firewall |
FireMon |
| Network Security Policy Management (Nspm) |
Forcepoint |
| Dlp (Data Loss Prevention) |
| Email Security | |
| Firewall | |
| Security Services Edge (Sse) | |
Forescout |
| Network Access Control (Nac) |
Fortinet |
| Access Management |
| Firewall | |
| Network Access Control (Nac) | |
| Siem (Security Information And Event Management) | |
| Vpn (Virtual Private Network) | |
| Waf (Web Application Firewall) | |
FreeBSD |
| Endpoint Auditing |
Gallagher |
| Physical Access Control |
Gamma |
| Other |
GitHub |
| Code Management |
GitLab |
| Code Management |
GoAnywhere |
| File Transfer |
| Cloud Auditing | |
| Generative Ai Apps | |
HP |
| File Sharing |
| Network Access Control (Nac) | |
| Network Devices | |
| Network Infrastructure & Management | |
| Printer | |
| Remote Access | |
| Web Server | |
HUMAN Security |
| Security Services Edge (Sse) |
Halcyon |
| Dlp (Data Loss Prevention) |
HelpSystems |
| Privilege Access Management |
Hillstone Networks |
| Ndr (Network Detection And Response) |
| Waf (Web Application Firewall) | |
Hornet |
| Email Security |
Huawei |
| Firewall |
IBM |
| Access Management |
| Database | |
| Dlp (Data Loss Prevention) | |
| ||
| File Systems And Object Storage | |
| Network Infrastructure & Management | |
| Siem (Security Information And Event Management) | |
| Virtualization & Containers | |
IMSS |
| Email Security |
IMSVA |
| Email Security |
IPTables |
| Firewall |
IXIA |
| Ips (Intrusion Prevention System) |
Illumio |
| Workload Protection |
Imperva |
| Database Security |
| Waf (Web Application Firewall) | |
Imprivata |
| Identity Administration |
Infoblox |
| Ip Address Management (Ipam) |
| Network Infrastructure & Management | |
Informatica |
| Data Warehouse |
Int64 Software |
| Access Management |
Ipswitch |
| File Transfer |
Ironscales |
| Email Security |
Island |
| Secure Enterprise Browser |
Ivanti |
| Vpn (Virtual Private Network) |
Jamf |
| Edr (Endpoint Detection & Response) |
Johnson Controls |
| Physical Access Control |
Jumpcloud |
| Access Management |
Juniper Networks |
| Firewall |
| Network Devices | |
Kasada |
| Ddos Mitigation Services |
Kaspersky |
| Epp (Endpoint Protection) |
Keeper Security |
| Credential Management |
Kemp |
| Load Balancer |
KnowBe4 |
| Email Security |
Kong |
| Proxy |
LanScope |
| Asset Management |
LastPass |
| Credential Management |
Lenel |
| Physical Access Control |
Libraesva |
| Email Security |
LiquidFiles |
| File Transfer |
LogRhythm |
| Network Analyzer |
| Siem (Security Information And Event Management) | |
Lookout |
| Mobile Management |
Malwarebytes |
| Epp (Endpoint Protection) |
ManageEngine |
| Credential Management |
| Event Management & Forwarding | |
| Privilege Access Management | |
MariaDB |
| Database |
McAfee |
| Security Services Edge (Sse) |
Menlo Security |
| Proxy |
MicroFocus ArcSight |
| Event Management & Forwarding |
Microsoft |
| Access Management |
| Cloud Auditing | |
| Cloud-Native Application Protection Platform (Cnapp) | |
| Database | |
| Dlp (Data Loss Prevention) | |
| ||
| Endpoint Auditing | |
| Epp (Endpoint Protection) | |
| Event Management & Forwarding | |
| Firewall | |
| Generative Ai Apps | |
| Insider Risk Management | |
| Network Access Control (Nac) | |
| Network Analyzer | |
| Privilege Access Management | |
| Remote Access | |
| Security Services Edge (Sse) | |
| Siem (Security Information And Event Management) | |
| User Authentication | |
| Web Server Auditing | |
| Workload Protection | |
Mimecast |
| Dlp (Data Loss Prevention) |
| Email Security | |
Monday.com |
| Crm (Customer Relationship Management) |
MongoDB |
| Database |
Mvision |
| Edr (Endpoint Detection & Response) |
Mysql |
| Database |
N3K |
| Ip Address Management (Ipam) |
NNT |
| File Integrity Monitoring |
Nagios |
| Network Performance Monitoring |
Nasuni |
| File Sharing |
NetApp |
| File Sharing |
| File Systems And Object Storage | |
NetMotion Wireless |
| Vpn (Virtual Private Network) |
Netskope |
| Cloud App Security Broker (Casb) |
Netwrix |
| Siem (Security Information And Event Management) |
NextDLP |
| Dlp (Data Loss Prevention) |
Nightfall |
| Dlp (Data Loss Prevention) |
Nozomi Networks |
| Ics Security |
OSSEC |
| Ips (Intrusion Prevention System) |
Obsidian Security |
| Cloud App Security Broker (Casb) |
Okta |
| Access Management |
Onapsis |
| Application Security Testing |
OneLogin |
| Access Management |
OneSpan |
| User Authentication |
OneWelcome |
| Access Management |
Open Shift |
| Virtualization & Containers |
Open VPN |
| Vpn (Virtual Private Network) |
OpenAI |
| Generative Ai Apps |
OpenDJ |
| Directory Service Auditing |
OpenLDAP |
| Directory Service Auditing |
Oracle |
| Cloud Auditing |
| Database | |
| Endpoint Auditing | |
Ordr |
| Iot Security |
Osquery |
| Database |
PacketFence |
| Network Access Control (Nac) |
PagerDuty |
| Other |
Palo Alto Networks |
| Cloud App Security Broker (Casb) |
| Cloud-Native Application Protection Platform (Cnapp) | |
| Edr (Endpoint Detection & Response) | |
| Firewall | |
| Siem (Security Information And Event Management) | |
| Threat Intelligence | |
| Vpn (Virtual Private Network) | |
Password Manager Pro |
| Credential Management |
Perforce |
| Code Management |
Picture Perfect |
| Physical Access Control |
Ping Identity |
| Access Management |
| Proxy | |
Portkey |
| Generative Ai Apps |
Portnox |
| Network Access Control (Nac) |
Postfix |
| |
PostgreSQL |
| Database |
PowerDNS |
| Network Automation And Orchestration |
PowerSentry |
| Other |
Progress |
| File Sharing |
Proofpoint |
| Email Security |
| Insider Risk Management | |
| Sandboxing | |
| Security Services Edge (Sse) | |
Qualys |
| Asset Management |
Quest Software |
| Event Management & Forwarding |
RS2 Technologies |
| Physical Access Control |
RSA |
| Access Management |
| Siem (Security Information And Event Management) | |
| User Authentication | |
Radware |
| Load Balancer |
| Waf (Web Application Firewall) | |
Rapid7 |
| Vulnerability Assessment |
Recorded Future |
| Threat Intelligence |
RedShield |
| Waf (Web Application Firewall) |
Riverbed Steelhead |
| Network Infrastructure & Management |
Rubrik |
| Backup & Recovery |
SAP |
| Erp (Enterprise Resource Planning) |
SIGSCI |
| Waf (Web Application Firewall) |
Sailpoint |
| Identity Administration |
Salesforce |
| Crm (Customer Relationship Management) |
Sangfor |
| Firewall |
Saviynt |
| Cloud Auditing |
Secomea |
| Remote Access |
SecurEnvoy |
| User Authentication |
SecureAuth |
| Access Management |
SecureLink |
| Identity Administration |
SecureNet |
| Vpn (Virtual Private Network) |
Semperis |
| Directory Service Auditing |
SentinelOne |
| Edr (Endpoint Detection & Response) |
| Endpoint Auditing | |
| Managed Detection And Response (Mdr) | |
ServiceNow |
| Other |
Shibboleth |
| Access Management |
Siemens |
| Physical Access Control |
Silverfort |
| User Authentication |
SiteMinder |
| Access Management |
SkySea |
| Siem (Security Information And Event Management) |
Skyformation |
| Event Management & Forwarding |
Skyhigh Security |
| Cloud App Security Broker (Casb) |
| Security Services Edge (Sse) | |
Slack |
| Communication Platform |
SmartSuite |
| Other |
Snort |
| Ips (Intrusion Prevention System) |
Snowflake |
| Database |
Sophos |
| Epp (Endpoint Protection) |
| Firewall | |
| Network Access Control (Nac) | |
Splunk |
| Network Performance Monitoring |
| Siem (Security Information And Event Management) | |
Squid |
| Proxy |
StealthBits |
| Directory Service Auditing |
SunOne |
| Directory Service Auditing |
Suricata |
| Ips (Intrusion Prevention System) |
Swift |
| Other |
Swimlane |
| Network Automation And Orchestration |
Swivel |
| User Authentication |
Symantec |
| Access Management |
| Cloud App Security Broker (Casb) | |
| Dlp (Data Loss Prevention) | |
| Edr (Endpoint Detection & Response) | |
| Email Security | |
| Epp (Endpoint Protection) | |
| Sandboxing | |
| Security Services Edge (Sse) | |
Synology NAS |
| File Sharing |
Sysdig |
| Infrastructure Monitoring |
TXOne Networks |
| Epp (Endpoint Protection) |
Tanium |
| Cloud-Native Application Protection Platform (Cnapp) |
| Edr (Endpoint Detection & Response) | |
| File Integrity Monitoring | |
Tenable |
| Vulnerability Assessment |
Teradata |
| Database |
ThoughtSpot |
| Data Warehouse |
ThreatBlockr |
| Firewall |
Trellix |
| Database Security |
| Dlp (Data Loss Prevention) | |
| Edr (Endpoint Detection & Response) | |
| Email Security | |
| Epp (Endpoint Protection) | |
| Ips (Intrusion Prevention System) | |
| Network | |
| Network Security Policy Management (Nspm) | |
| Siem (Security Information And Event Management) | |
Trend Micro |
| Asset Management |
| Email Security | |
| Epp (Endpoint Protection) | |
| Ips (Intrusion Prevention System) | |
| Ndr (Network Detection And Response) | |
| Sandboxing | |
Tripwire Enterprise |
| Security Configuration Management (Scm) |
Tyco |
| Physical Access Control |
Ubiquiti |
| Network Access Control (Nac) |
Unix |
| |
| Endpoint Auditing | |
| Event Management & Forwarding | |
VBCorp |
| Epp (Endpoint Protection) |
VMware |
| Edr (Endpoint Detection & Response) |
| Identity Administration | |
| Mobile Management | |
| Network Infrastructure & Management | |
| Virtualization & Containers | |
| Workload Protection | |
Varonis |
| Siem (Security Information And Event Management) |
Vectra |
| Ndr (Network Detection And Response) |
Veeam |
| Backup & Recovery |
Venafi |
| Epp (Endpoint Protection) |
Virtru |
| Email Security |
Visma |
| Privilege Access Management |
Vormetric |
| Dlp (Data Loss Prevention) |
Wallix |
| Privilege Access Management |
Watchguard |
| Firewall |
Weblogin |
| Other |
Wiz |
| Cloud-Native Application Protection Platform (Cnapp) |
Workday |
| Erp (Enterprise Resource Planning) |
XPS |
| Printer |
Zeek |
| Network Analyzer |
Zero Networks |
| Network Access Control (Nac) |
ZeroFox |
| Threat Intelligence |
Zimperium |
| Ips (Intrusion Prevention System) |
Zoom |
| Communication Platform |
Zscaler |
| Edr (Endpoint Detection & Response) |
| Firewall | |
| Honeypot | |
| Security Services Edge (Sse) | |
| Vpn (Virtual Private Network) | |
Zyxel Networks |
| Firewall |
iBoss |
| Security Services Edge (Sse) |
oVirt |
| Virtualization & Containers |
pfSense |
| Firewall |
xPLAN |
| Crm (Customer Relationship Management) |