Cisco Defense Orchestrator Export to SIEM

kate-robson · ‎09-09-2024

Hi,

Is it possible to export CDO logs to Microsoft Sentinel via syslog or API?

Thanks,

marce1000 · ‎09-09-2024

- Checkout : https://www.cisco.com/c/en/us/td/docs/security/cdo/multicloud-defense/user-guide/cisco-multicloud-defense-user-guide/log-forwarding-destinations-siems.html

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Marvin Rhoads · ‎09-10-2024

Cisco Defense Orchestrator (CDO) logs are only available natively in the CDO platform itself.

That's distinct from logs of managed devices (ASA, FTD etc.) which can be sent to any reachable log repository via the device's syslog settings.

The Cisco Multicloud Defense (CMD) product mentioned by @marce1000 is separate from CDO per se - it just launches from the CDO landing page into a completely separate product (at this time).