Cisco Defense Orchestrator Export to SIEM

[kate-robson]

Hi,

Is it possible to export CDO logs to Microsoft Sentinel via syslog or API?

Thanks,

[Mark Elsen]

  - Checkout : https://www.cisco.com/c/en/us/td/docs/security/cdo/multicloud-defense/user-guide/cisco-multicloud-defense-user-guide/log-forwarding-destinations-siems.html

 M.

[Marvin Rhoads]

Cisco Defense Orchestrator (CDO) logs are only available natively in the CDO platform itself.

That's distinct from logs of managed devices (ASA, FTD etc.) which can be sent to any reachable log repository via the device's syslog settings.

The Cisco Multicloud Defense (CMD) product mentioned by @Mark Elsen is separate from CDO per se - it just launches from the CDO landing page into a completely separate product (at this time).